[2025-08-23 00:03:04][353786630529656][1 ms][INFO] === Request start === [2025-08-23 00:03:04][353786630529656][2 ms][DEBUG] START check_scloud [2025-08-23 00:03:04][353786630529656][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:03:04][353786630529656][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 4431 4970 23977868 171256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:03:04][353786630529656][294 ms][DEBUG] targetPkg: running [2025-08-23 00:03:04][353786630529656][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 00:03:04][353786630529656][295 ms][DEBUG] START check_boot_completed [2025-08-23 00:03:04][353786630529656][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:03:04][353786630529656][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:03:04][353786630529656][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:03:04][353786630529656][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:03:04][353786630529656][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 00:03:04][353786630529656][388 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:03:04][353786630529656][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353786630529656\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9599\"}'\'' -e'"" [2025-08-23 00:03:04][353786630529656][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:03:04][353786630529656][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353786630529656\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9599\"}'\'' -e'"" [2025-08-23 00:03:09][353786630529656][5652 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44d4b1a0-d875-44ff-a0a2-c937ec8dd3d1","id":"QR_44d4b1a0-d875-44ff-a0a2-c937ec8dd3d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:03:09][353786630529656][5808 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-23 00:03:09][353786630529656][5808 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-23 00:03:09][353786630529656][5808 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:12:04][351070612414720][1 ms][INFO] === Request start === [2025-08-23 00:12:04][351070612414720][2 ms][DEBUG] START check_scloud [2025-08-23 00:12:04][351070612414720][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:12:04][351070612414720][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 4431 4970 24099888 182476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:12:04][351070612414720][276 ms][DEBUG] targetPkg: running [2025-08-23 00:12:04][351070612414720][276 ms][DEBUG] END check_scloud in 274 ms [2025-08-23 00:12:04][351070612414720][276 ms][DEBUG] START check_boot_completed [2025-08-23 00:12:04][351070612414720][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:12:04][351070612414720][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:12:04][351070612414720][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:12:05][351070612414720][370 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 00:12:05][351070612414720][370 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 00:12:05][351070612414720][370 ms][DEBUG] START check_internet [2025-08-23 00:12:05][351070612414720][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] SU: done in 561 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.350/201.350/201.350/0.000 ms\n [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] check_internet: online [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] END check_internet in 562 ms [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:12:05][351070612414720][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351070612414720\",\"model\":\"SM-F721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3586\"}'\'' -e'"" [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:12:05][351070612414720][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351070612414720\",\"model\":\"SM-F721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3586\"}'\'' -e'"" [2025-08-23 00:12:11][351070612414720][6383 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94e82b89-995a-4495-8ff0-7ebc82f67a6d","id":"QR_94e82b89-995a-4495-8ff0-7ebc82f67a6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:12:11][351070612414720][6539 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-23 00:12:11][351070612414720][6539 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-08-23 00:12:11][351070612414720][6540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:13:03][352047913455783][0 ms][INFO] === Request start === [2025-08-23 00:13:03][352047913455783][1 ms][DEBUG] START check_scloud [2025-08-23 00:13:03][352047913455783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:13:03][352047913455783][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 4431 4970 24281468 194352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:13:03][352047913455783][276 ms][DEBUG] targetPkg: running [2025-08-23 00:13:03][352047913455783][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 00:13:03][352047913455783][276 ms][DEBUG] START check_boot_completed [2025-08-23 00:13:03][352047913455783][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:13:03][352047913455783][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:13:03][352047913455783][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:13:03][352047913455783][416 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 00:13:03][352047913455783][416 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 00:13:03][352047913455783][416 ms][DEBUG] rawBody.length=1148 [2025-08-23 00:13:03][352047913455783][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352047913455783\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2751\"}'\'' -e'"" [2025-08-23 00:13:03][352047913455783][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:13:03][352047913455783][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352047913455783\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2751\"}'\'' -e'"" [2025-08-23 00:13:07][352047913455783][4790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e3d21c2-6cf8-4aee-a7ad-544ebbbb50d3","id":"QR_7e3d21c2-6cf8-4aee-a7ad-544ebbbb50d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:13:08][352047913455783][4946 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-23 00:13:08][352047913455783][4946 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-23 00:13:08][352047913455783][4946 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:18:03][351771921632700][1 ms][INFO] === Request start === [2025-08-23 00:18:03][351771921632700][2 ms][DEBUG] START check_scloud [2025-08-23 00:18:03][351771921632700][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:18:03][351771921632700][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 4431 4970 24440416 195632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:18:03][351771921632700][321 ms][DEBUG] targetPkg: running [2025-08-23 00:18:03][351771921632700][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 00:18:03][351771921632700][321 ms][DEBUG] START check_boot_completed [2025-08-23 00:18:03][351771921632700][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:18:03][351771921632700][352 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 00:18:03][351771921632700][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:18:03][351771921632700][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:18:03][351771921632700][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 00:18:03][351771921632700][400 ms][DEBUG] START check_internet [2025-08-23 00:18:03][351771921632700][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.901/199.901/199.901/0.000 ms\n [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] check_internet: online [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] END check_internet in 515 ms [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] rawBody.length=1148 [2025-08-23 00:18:04][351771921632700][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771921632700\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9506\"}'\'' -e'"" [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:18:04][351771921632700][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771921632700\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9506\"}'\'' -e'"" [2025-08-23 00:18:08][351771921632700][5179 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed513c9a-c170-4480-a257-d5de088ae422","id":"QR_ed513c9a-c170-4480-a257-d5de088ae422","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:18:08][351771921632700][5336 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 00:18:08][351771921632700][5336 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 00:18:08][351771921632700][5336 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:24:04][359097842306337][1 ms][INFO] === Request start === [2025-08-23 00:24:04][359097842306337][1 ms][DEBUG] START check_scloud [2025-08-23 00:24:04][359097842306337][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:24:05][359097842306337][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 4431 4970 24605380 196112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:24:05][359097842306337][303 ms][DEBUG] targetPkg: running [2025-08-23 00:24:05][359097842306337][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 00:24:05][359097842306337][303 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:05][359097842306337][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:05][359097842306337][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:24:05][359097842306337][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:05][359097842306337][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 00:24:05][359097842306337][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 00:24:05][359097842306337][412 ms][DEBUG] START check_internet [2025-08-23 00:24:05][359097842306337][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.885/202.885/202.885/0.000 ms\n [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] check_internet: online [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] END check_internet in 484 ms [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:24:05][359097842306337][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097842306337\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9349\"}'\'' -e'"" [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:24:05][359097842306337][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097842306337\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9349\"}'\'' -e'"" [2025-08-23 00:24:11][359097842306337][6363 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a686dcc0-448a-4e30-b10b-bfd0602c804c","id":"QR_a686dcc0-448a-4e30-b10b-bfd0602c804c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:24:11][359097842306337][6519 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-23 00:24:11][359097842306337][6519 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-23 00:24:11][359097842306337][6519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:24:19][351460450178919][0 ms][INFO] === Request start === [2025-08-23 00:24:19][351460450178919][1 ms][DEBUG] START check_scloud [2025-08-23 00:24:19][351460450178919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:24:19][351460450178919][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 4431 4970 24743820 206560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:24:19][351460450178919][304 ms][DEBUG] targetPkg: running [2025-08-23 00:24:19][351460450178919][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 00:24:19][351460450178919][304 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:19][351460450178919][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:19][351460450178919][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:24:19][351460450178919][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:19][351460450178919][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 00:24:19][351460450178919][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 00:24:19][351460450178919][413 ms][DEBUG] START check_internet [2025-08-23 00:24:19][351460450178919][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.945/237.945/237.945/0.000 ms\n [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] check_internet: online [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] END check_internet in 359 ms [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:24:20][351460450178919][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8091\"}'\'' -e'"" [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:24:20][351460450178919][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8091\"}'\'' -e'"" [2025-08-23 00:24:23][351460450178919][4600 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 00:24:24][351460450178919][4756 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=115 [2025-08-23 00:24:24][351460450178919][4756 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 00:24:24][351460450178919][4756 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 00:24:24][][0 ms][INFO] === Request start === [2025-08-23 00:24:24][][0 ms][DEBUG] START check_scloud [2025-08-23 00:24:24][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:24:24][][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 4431 4970 24906772 218152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:24:24][][291 ms][DEBUG] targetPkg: running [2025-08-23 00:24:24][][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 00:24:24][][291 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:24][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:24][][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:24:24][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:24][][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 00:24:24][][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 00:24:24][][401 ms][DEBUG] START check_internet [2025-08-23 00:24:24][][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:24:25][][697 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.001/145.001/145.001/0.000 ms\n [2025-08-23 00:24:25][][697 ms][DEBUG] check_internet: online [2025-08-23 00:24:25][][697 ms][DEBUG] END check_internet in 297 ms [2025-08-23 00:24:25][][697 ms][DEBUG] rawBody.length=1130 [2025-08-23 00:24:25][][698 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5923\"}'\'' -e'"" [2025-08-23 00:24:25][][698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:24:25][][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5923\"}'\'' -e'"" [2025-08-23 00:24:28][][4368 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 00:24:28][][4368 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-23 00:24:28][][4368 ms][WARN] Detected error: Process with pid 4431 either refused to load frida-agent, or terminated during injection [2025-08-23 00:24:28][][4368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 00:24:28][][4509 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 00:24:28][][4509 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 00:24:28][][4509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 00:24:28][][4650 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 00:24:28][][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 00:24:29][][4837 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 00:24:31][][6852 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:31][][6852 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:31][][6899 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:24:31][][6899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:31][][6946 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:24:31][][6946 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 00:24:34][][9960 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 00:24:34][][9961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5923\"}'\'' -e'"" [2025-08-23 00:24:38][][14647 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 00:24:39][][14803 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=115 [2025-08-23 00:24:39][][14803 ms][DEBUG] END runCmdUntilRes#2 in 4843 ms [2025-08-23 00:24:39][][14803 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 00:24:39][351460450178919][0 ms][INFO] === Request start === [2025-08-23 00:24:39][351460450178919][1 ms][DEBUG] START check_scloud [2025-08-23 00:24:39][351460450178919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:24:40][351460450178919][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 8938 4970 23572316 124256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:24:40][351460450178919][248 ms][DEBUG] targetPkg: running [2025-08-23 00:24:40][351460450178919][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-23 00:24:40][351460450178919][248 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:40][351460450178919][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:40][351460450178919][294 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:24:40][351460450178919][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:40][351460450178919][388 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 00:24:40][351460450178919][388 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 00:24:40][351460450178919][388 ms][DEBUG] START check_internet [2025-08-23 00:24:40][351460450178919][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.297/144.297/144.297/0.000 ms\n [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] check_internet: online [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] END check_internet in 281 ms [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] rawBody.length=1148 [2025-08-23 00:24:40][351460450178919][669 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:24:40][351460450178919][669 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-08-23 00:24:44][351460450178919][4278 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 00:24:44][351460450178919][4434 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=107 [2025-08-23 00:24:44][351460450178919][4434 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-23 00:24:44][351460450178919][4434 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 00:24:44][][0 ms][INFO] === Request start === [2025-08-23 00:24:44][][1 ms][DEBUG] START check_scloud [2025-08-23 00:24:44][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:24:44][][226 ms][DEBUG] SU: done in 225 ms; outu0_a118 8938 4970 23714660 136384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:24:44][][226 ms][DEBUG] targetPkg: running [2025-08-23 00:24:44][][226 ms][DEBUG] END check_scloud in 225 ms [2025-08-23 00:24:44][][226 ms][DEBUG] START check_boot_completed [2025-08-23 00:24:44][][226 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:24:44][][257 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 00:24:44][][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:24:44][][304 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:24:44][][304 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 00:24:44][][304 ms][DEBUG] START check_internet [2025-08-23 00:24:44][][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:24:45][][538 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.314/137.314/137.314/0.000 ms\n [2025-08-23 00:24:45][][538 ms][DEBUG] check_internet: online [2025-08-23 00:24:45][][538 ms][DEBUG] END check_internet in 235 ms [2025-08-23 00:24:45][][538 ms][DEBUG] rawBody.length=1129 [2025-08-23 00:24:45][][538 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5286\"}'\'' -e'"" [2025-08-23 00:24:45][][539 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:24:45][][539 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5286\"}'\'' -e'"" [2025-08-23 00:24:48][][3865 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 00:24:48][][4022 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=107 [2025-08-23 00:24:48][][4022 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-08-23 00:24:48][][4022 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 00:35:03][351064755881068][1 ms][INFO] === Request start === [2025-08-23 00:35:03][351064755881068][2 ms][DEBUG] START check_scloud [2025-08-23 00:35:03][351064755881068][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:35:03][351064755881068][269 ms][DEBUG] SU: done in 267 ms; outu0_a118 8938 4970 23742176 149752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:35:03][351064755881068][269 ms][DEBUG] targetPkg: running [2025-08-23 00:35:03][351064755881068][269 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 00:35:03][351064755881068][269 ms][DEBUG] START check_boot_completed [2025-08-23 00:35:03][351064755881068][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:35:03][351064755881068][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:35:03][351064755881068][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:35:03][351064755881068][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:35:03][351064755881068][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 00:35:03][351064755881068][362 ms][DEBUG] rawBody.length=1148 [2025-08-23 00:35:03][351064755881068][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064755881068\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-08-23 00:35:03][351064755881068][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:35:03][351064755881068][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064755881068\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-08-23 00:35:07][351064755881068][4314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e88ec12f-4cdb-453f-aa54-b7bda10f0f0c","id":"QR_e88ec12f-4cdb-453f-aa54-b7bda10f0f0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:35:07][351064755881068][4471 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 00:35:07][351064755881068][4471 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 00:35:07][351064755881068][4471 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:39:03][359156947417546][1 ms][INFO] === Request start === [2025-08-23 00:39:03][359156947417546][2 ms][DEBUG] START check_scloud [2025-08-23 00:39:03][359156947417546][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:39:03][359156947417546][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 8938 4970 23911340 161304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:39:03][359156947417546][261 ms][DEBUG] targetPkg: running [2025-08-23 00:39:03][359156947417546][261 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 00:39:03][359156947417546][261 ms][DEBUG] START check_boot_completed [2025-08-23 00:39:03][359156947417546][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:39:03][359156947417546][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 00:39:03][359156947417546][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:39:03][359156947417546][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:39:03][359156947417546][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 00:39:03][359156947417546][339 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:39:03][359156947417546][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9223\"}'\'' -e'"" [2025-08-23 00:39:03][359156947417546][339 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:39:03][359156947417546][339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9223\"}'\'' -e'"" [2025-08-23 00:39:10][359156947417546][7384 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_040de797-7801-4c9e-bebf-5ac24a5047e9","id":"QR_040de797-7801-4c9e-bebf-5ac24a5047e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:39:10][359156947417546][7540 ms][DEBUG] proc_open done in 7201 ms; code=255; res.len=3343 [2025-08-23 00:39:10][359156947417546][7540 ms][DEBUG] END runCmdUntilRes#1 in 7201 ms [2025-08-23 00:39:10][359156947417546][7540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:40:03][359156947417546][0 ms][INFO] === Request start === [2025-08-23 00:40:03][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-23 00:40:03][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:40:03][359156947417546][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8938 4970 24029200 171928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:40:03][359156947417546][312 ms][DEBUG] targetPkg: running [2025-08-23 00:40:03][359156947417546][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 00:40:03][359156947417546][312 ms][DEBUG] START check_boot_completed [2025-08-23 00:40:03][359156947417546][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:40:03][359156947417546][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:40:03][359156947417546][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:40:03][359156947417546][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:40:03][359156947417546][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 00:40:03][359156947417546][405 ms][DEBUG] START check_internet [2025-08-23 00:40:03][359156947417546][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:40:04][359156947417546][874 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.902/201.902/201.902/0.000 ms\n [2025-08-23 00:40:04][359156947417546][874 ms][DEBUG] check_internet: online [2025-08-23 00:40:04][359156947417546][874 ms][DEBUG] END check_internet in 469 ms [2025-08-23 00:40:04][359156947417546][874 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:40:04][359156947417546][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9028\"}'\'' -e'"" [2025-08-23 00:40:04][359156947417546][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:40:04][359156947417546][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9028\"}'\'' -e'"" [2025-08-23 00:40:09][359156947417546][5420 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba243a7e-7ce2-4026-b381-842766a1b696","id":"QR_ba243a7e-7ce2-4026-b381-842766a1b696","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:40:09][359156947417546][5576 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-23 00:40:09][359156947417546][5576 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-23 00:40:09][359156947417546][5576 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:41:03][359156947417546][1 ms][INFO] === Request start === [2025-08-23 00:41:03][359156947417546][2 ms][DEBUG] START check_scloud [2025-08-23 00:41:03][359156947417546][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:41:04][359156947417546][260 ms][DEBUG] SU: done in 258 ms; outu0_a118 8938 4970 24179828 183780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:41:04][359156947417546][260 ms][DEBUG] targetPkg: running [2025-08-23 00:41:04][359156947417546][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 00:41:04][359156947417546][260 ms][DEBUG] START check_boot_completed [2025-08-23 00:41:04][359156947417546][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:41:04][359156947417546][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:41:04][359156947417546][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:41:04][359156947417546][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 00:41:04][359156947417546][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 00:41:04][359156947417546][369 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:41:04][359156947417546][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4416\"}'\'' -e'"" [2025-08-23 00:41:04][359156947417546][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:41:04][359156947417546][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4416\"}'\'' -e'"" [2025-08-23 00:41:09][359156947417546][6071 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7747ad0c-3408-424e-b85b-a36b53ef5ce6","id":"QR_7747ad0c-3408-424e-b85b-a36b53ef5ce6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:41:10][359156947417546][6227 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-08-23 00:41:10][359156947417546][6227 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-23 00:41:10][359156947417546][6227 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:42:03][359156947417546][0 ms][INFO] === Request start === [2025-08-23 00:42:03][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-23 00:42:03][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:42:04][359156947417546][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 8938 4970 24297688 194852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:42:04][359156947417546][302 ms][DEBUG] targetPkg: running [2025-08-23 00:42:04][359156947417546][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 00:42:04][359156947417546][302 ms][DEBUG] START check_boot_completed [2025-08-23 00:42:04][359156947417546][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:42:04][359156947417546][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:42:04][359156947417546][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:42:04][359156947417546][442 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 00:42:04][359156947417546][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 00:42:04][359156947417546][443 ms][DEBUG] START check_internet [2025-08-23 00:42:04][359156947417546][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.778/200.778/200.778/0.000 ms\n [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] check_internet: online [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] END check_internet in 532 ms [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:42:04][359156947417546][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:42:04][359156947417546][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-08-23 00:42:09][359156947417546][5410 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f177c81-5513-4d49-b889-a919f18a2af0","id":"QR_0f177c81-5513-4d49-b889-a919f18a2af0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:42:09][359156947417546][5566 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 00:42:09][359156947417546][5566 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 00:42:09][359156947417546][5566 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:43:03][359156947417546][1 ms][INFO] === Request start === [2025-08-23 00:43:03][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-23 00:43:03][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:43:04][359156947417546][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 8938 4970 24413372 206968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:43:04][359156947417546][282 ms][DEBUG] targetPkg: running [2025-08-23 00:43:04][359156947417546][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 00:43:04][359156947417546][282 ms][DEBUG] START check_boot_completed [2025-08-23 00:43:04][359156947417546][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:43:04][359156947417546][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 00:43:04][359156947417546][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:43:04][359156947417546][361 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 00:43:04][359156947417546][361 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 00:43:04][359156947417546][361 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:43:04][359156947417546][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4545\"}'\'' -e'"" [2025-08-23 00:43:04][359156947417546][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:43:04][359156947417546][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4545\"}'\'' -e'"" [2025-08-23 00:43:08][359156947417546][4312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12c45a88-7e7a-42a8-ad85-3333a3d98eed","id":"QR_12c45a88-7e7a-42a8-ad85-3333a3d98eed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:43:08][359156947417546][4468 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-23 00:43:08][359156947417546][4468 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-23 00:43:08][359156947417546][4468 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:44:03][359156947417546][1 ms][INFO] === Request start === [2025-08-23 00:44:03][359156947417546][2 ms][DEBUG] START check_scloud [2025-08-23 00:44:03][359156947417546][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:44:03][359156947417546][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 8938 4970 24529312 217372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:44:03][359156947417546][299 ms][DEBUG] targetPkg: running [2025-08-23 00:44:03][359156947417546][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 00:44:03][359156947417546][299 ms][DEBUG] START check_boot_completed [2025-08-23 00:44:03][359156947417546][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:44:03][359156947417546][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:44:03][359156947417546][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:44:03][359156947417546][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 00:44:03][359156947417546][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 00:44:03][359156947417546][408 ms][DEBUG] START check_internet [2025-08-23 00:44:03][359156947417546][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.828/237.828/237.828/0.000 ms\n [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] check_internet: online [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] END check_internet in 345 ms [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:44:04][359156947417546][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1903\"}'\'' -e'"" [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:44:04][359156947417546][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1903\"}'\'' -e'"" [2025-08-23 00:44:09][359156947417546][6109 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcfddd15-c34d-42ff-bbd2-ca121cc0d8c6","id":"QR_dcfddd15-c34d-42ff-bbd2-ca121cc0d8c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:44:09][359156947417546][6266 ms][DEBUG] proc_open done in 5512 ms; code=255; res.len=3343 [2025-08-23 00:44:09][359156947417546][6266 ms][DEBUG] END runCmdUntilRes#1 in 5512 ms [2025-08-23 00:44:09][359156947417546][6266 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:45:03][359156947417546][0 ms][INFO] === Request start === [2025-08-23 00:45:03][359156947417546][0 ms][DEBUG] START check_scloud [2025-08-23 00:45:03][359156947417546][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:45:03][359156947417546][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 8938 4970 24645252 229212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:45:03][359156947417546][298 ms][DEBUG] targetPkg: running [2025-08-23 00:45:03][359156947417546][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 00:45:03][359156947417546][298 ms][DEBUG] START check_boot_completed [2025-08-23 00:45:03][359156947417546][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:45:03][359156947417546][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:45:03][359156947417546][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:45:03][359156947417546][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 00:45:03][359156947417546][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 00:45:03][359156947417546][394 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:45:03][359156947417546][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8360\"}'\'' -e'"" [2025-08-23 00:45:03][359156947417546][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:45:03][359156947417546][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8360\"}'\'' -e'"" [2025-08-23 00:45:09][359156947417546][5984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a92d6dc2-6c2e-4d7e-84c9-d26b81c6b19a","id":"QR_a92d6dc2-6c2e-4d7e-84c9-d26b81c6b19a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:45:09][359156947417546][6140 ms][DEBUG] proc_open done in 5746 ms; code=255; res.len=3343 [2025-08-23 00:45:09][359156947417546][6140 ms][DEBUG] END runCmdUntilRes#1 in 5747 ms [2025-08-23 00:45:09][359156947417546][6140 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:46:03][359156947417546][0 ms][INFO] === Request start === [2025-08-23 00:46:03][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-23 00:46:03][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:46:04][359156947417546][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 8938 4970 24794860 239940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:46:04][359156947417546][258 ms][DEBUG] targetPkg: running [2025-08-23 00:46:04][359156947417546][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 00:46:04][359156947417546][258 ms][DEBUG] START check_boot_completed [2025-08-23 00:46:04][359156947417546][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:46:04][359156947417546][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 00:46:04][359156947417546][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:46:04][359156947417546][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:46:04][359156947417546][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 00:46:04][359156947417546][336 ms][DEBUG] START check_internet [2025-08-23 00:46:04][359156947417546][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.812/200.812/200.812/0.000 ms\n [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] check_internet: online [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] END check_internet in 453 ms [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:46:04][359156947417546][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3173\"}'\'' -e'"" [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:46:04][359156947417546][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3173\"}'\'' -e'"" [2025-08-23 00:46:08][359156947417546][4647 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 00:46:08][359156947417546][4647 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 00:46:08][359156947417546][4647 ms][WARN] Detected error: Process with pid 8938 either refused to load frida-agent, or terminated during injection [2025-08-23 00:46:08][359156947417546][4647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 00:46:08][359156947417546][4772 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 00:46:08][359156947417546][4772 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 00:46:08][359156947417546][4773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 00:46:08][359156947417546][4929 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 00:46:08][359156947417546][4929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 00:46:08][359156947417546][5085 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 00:46:11][359156947417546][7100 ms][DEBUG] START check_boot_completed [2025-08-23 00:46:11][359156947417546][7100 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:46:11][359156947417546][7147 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:46:11][359156947417546][7147 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:46:11][359156947417546][7194 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:46:11][359156947417546][7194 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 00:46:14][359156947417546][10208 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 00:46:14][359156947417546][10208 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3173\"}'\'' -e'"" [2025-08-23 00:46:18][359156947417546][14489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89c625e7-2d24-4a2b-a178-e73a545a6f3b","id":"QR_89c625e7-2d24-4a2b-a178-e73a545a6f3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:46:18][359156947417546][14645 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 00:46:18][359156947417546][14645 ms][DEBUG] END runCmdUntilRes#2 in 4437 ms [2025-08-23 00:46:18][359156947417546][14645 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:47:03][359156947417546][0 ms][INFO] === Request start === [2025-08-23 00:47:03][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-23 00:47:03][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:47:03][359156947417546][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10858 4970 23475220 127348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:47:03][359156947417546][304 ms][DEBUG] targetPkg: running [2025-08-23 00:47:03][359156947417546][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 00:47:03][359156947417546][304 ms][DEBUG] START check_boot_completed [2025-08-23 00:47:03][359156947417546][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:47:03][359156947417546][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 00:47:03][359156947417546][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:47:04][359156947417546][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 00:47:04][359156947417546][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 00:47:04][359156947417546][397 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:47:04][359156947417546][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5175\"}'\'' -e'"" [2025-08-23 00:47:04][359156947417546][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:47:04][359156947417546][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5175\"}'\'' -e'"" [2025-08-23 00:47:10][359156947417546][7161 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4be01635-6f3c-423b-81cf-23266af42b15","id":"QR_4be01635-6f3c-423b-81cf-23266af42b15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:47:10][359156947417546][7317 ms][DEBUG] proc_open done in 6920 ms; code=255; res.len=3343 [2025-08-23 00:47:10][359156947417546][7317 ms][DEBUG] END runCmdUntilRes#1 in 6920 ms [2025-08-23 00:47:10][359156947417546][7317 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 00:49:04][358140832174413][1 ms][INFO] === Request start === [2025-08-23 00:49:04][358140832174413][2 ms][DEBUG] START check_scloud [2025-08-23 00:49:04][358140832174413][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 00:49:05][358140832174413][250 ms][DEBUG] SU: done in 248 ms; outu0_a118 10858 4970 23616300 137808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 00:49:05][358140832174413][250 ms][DEBUG] targetPkg: running [2025-08-23 00:49:05][358140832174413][250 ms][DEBUG] END check_scloud in 248 ms [2025-08-23 00:49:05][358140832174413][250 ms][DEBUG] START check_boot_completed [2025-08-23 00:49:05][358140832174413][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 00:49:05][358140832174413][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 00:49:05][358140832174413][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 00:49:05][358140832174413][343 ms][DEBUG] SU: done in 46 ms; out [2025-08-23 00:49:05][358140832174413][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 00:49:05][358140832174413][343 ms][DEBUG] rawBody.length=1149 [2025-08-23 00:49:05][358140832174413][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832174413\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5138\"}'\'' -e'"" [2025-08-23 00:49:05][358140832174413][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 00:49:05][358140832174413][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832174413\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5138\"}'\'' -e'"" [2025-08-23 00:49:10][358140832174413][5514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_709ce1d1-99bc-4465-8af4-6d63d901c643","id":"QR_709ce1d1-99bc-4465-8af4-6d63d901c643","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 00:49:10][358140832174413][5670 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 00:49:10][358140832174413][5670 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-23 00:49:10][358140832174413][5670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 01:14:04][350362204000236][1 ms][INFO] === Request start === [2025-08-23 01:14:04][350362204000236][2 ms][DEBUG] START check_scloud [2025-08-23 01:14:04][350362204000236][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 01:14:04][350362204000236][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 10858 4970 23742496 120448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 01:14:04][350362204000236][315 ms][DEBUG] targetPkg: running [2025-08-23 01:14:04][350362204000236][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 01:14:04][350362204000236][315 ms][DEBUG] START check_boot_completed [2025-08-23 01:14:04][350362204000236][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 01:14:05][350362204000236][345 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 01:14:05][350362204000236][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 01:14:05][350362204000236][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 01:14:05][350362204000236][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 01:14:05][350362204000236][393 ms][DEBUG] START check_internet [2025-08-23 01:14:05][350362204000236][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 01:14:05][350362204000236][845 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.292/201.292/201.292/0.000 ms\n [2025-08-23 01:14:05][350362204000236][845 ms][DEBUG] check_internet: online [2025-08-23 01:14:05][350362204000236][846 ms][DEBUG] END check_internet in 452 ms [2025-08-23 01:14:05][350362204000236][846 ms][DEBUG] rawBody.length=1148 [2025-08-23 01:14:05][350362204000236][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8135\"}'\'' -e'"" [2025-08-23 01:14:05][350362204000236][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 01:14:05][350362204000236][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8135\"}'\'' -e'"" [2025-08-23 01:14:09][350362204000236][5157 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6ec9524-4d46-44eb-8f0b-704fd85e9f77","id":"QR_a6ec9524-4d46-44eb-8f0b-704fd85e9f77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 01:14:09][350362204000236][5313 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-23 01:14:09][350362204000236][5313 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-23 01:14:09][350362204000236][5313 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 01:18:04][356933580694505][1 ms][INFO] === Request start === [2025-08-23 01:18:04][356933580694505][2 ms][DEBUG] START check_scloud [2025-08-23 01:18:04][356933580694505][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 01:18:04][356933580694505][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 10858 4970 23904016 127724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 01:18:04][356933580694505][302 ms][DEBUG] targetPkg: running [2025-08-23 01:18:04][356933580694505][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 01:18:04][356933580694505][302 ms][DEBUG] START check_boot_completed [2025-08-23 01:18:04][356933580694505][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 01:18:04][356933580694505][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 01:18:04][356933580694505][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 01:18:04][356933580694505][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 01:18:04][356933580694505][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 01:18:04][356933580694505][395 ms][DEBUG] START check_internet [2025-08-23 01:18:04][356933580694505][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.667/200.667/200.667/0.000 ms\n [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] check_internet: online [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] END check_internet in 438 ms [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] rawBody.length=1149 [2025-08-23 01:18:05][356933580694505][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933580694505\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3414\"}'\'' -e'"" [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 01:18:05][356933580694505][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933580694505\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3414\"}'\'' -e'"" [2025-08-23 01:18:11][356933580694505][6691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a9ef7e3-5d34-4c02-a6a2-720524f41ea1","id":"QR_1a9ef7e3-5d34-4c02-a6a2-720524f41ea1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 01:18:11][356933580694505][6847 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-08-23 01:18:11][356933580694505][6847 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-23 01:18:11][356933580694505][6847 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 01:34:04][353096462507220][1 ms][INFO] === Request start === [2025-08-23 01:34:04][353096462507220][2 ms][DEBUG] START check_scloud [2025-08-23 01:34:04][353096462507220][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 01:34:05][353096462507220][264 ms][DEBUG] SU: done in 262 ms; outu0_a118 10858 4970 24027048 136184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 01:34:05][353096462507220][264 ms][DEBUG] targetPkg: running [2025-08-23 01:34:05][353096462507220][264 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 01:34:05][353096462507220][264 ms][DEBUG] START check_boot_completed [2025-08-23 01:34:05][353096462507220][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 01:34:05][353096462507220][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 01:34:05][353096462507220][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 01:34:05][353096462507220][343 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 01:34:05][353096462507220][344 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-23 01:34:05][353096462507220][344 ms][DEBUG] START check_internet [2025-08-23 01:34:05][353096462507220][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.449/199.449/199.449/0.000 ms\n [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] check_internet: online [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] END check_internet in 467 ms [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] rawBody.length=1149 [2025-08-23 01:34:05][353096462507220][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096462507220\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 01:34:05][353096462507220][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096462507220\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-08-23 01:34:12][353096462507220][7699 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c8273f2-e3cc-46d8-9d30-17b1e9f293a1","id":"QR_7c8273f2-e3cc-46d8-9d30-17b1e9f293a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 01:34:12][353096462507220][7856 ms][DEBUG] proc_open done in 7045 ms; code=255; res.len=3343 [2025-08-23 01:34:12][353096462507220][7856 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-23 01:34:12][353096462507220][7856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 01:43:04][356724570655931][1 ms][INFO] === Request start === [2025-08-23 01:43:04][356724570655931][2 ms][DEBUG] START check_scloud [2025-08-23 01:43:04][356724570655931][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 01:43:05][356724570655931][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 10858 4970 24173644 144252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 01:43:05][356724570655931][297 ms][DEBUG] targetPkg: running [2025-08-23 01:43:05][356724570655931][297 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 01:43:05][356724570655931][297 ms][DEBUG] START check_boot_completed [2025-08-23 01:43:05][356724570655931][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 01:43:05][356724570655931][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 01:43:05][356724570655931][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 01:43:05][356724570655931][406 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 01:43:05][356724570655931][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 01:43:05][356724570655931][406 ms][DEBUG] rawBody.length=1149 [2025-08-23 01:43:05][356724570655931][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724570655931\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3259\"}'\'' -e'"" [2025-08-23 01:43:05][356724570655931][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 01:43:05][356724570655931][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724570655931\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3259\"}'\'' -e'"" [2025-08-23 01:43:11][356724570655931][6920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e108a694-20d2-44ca-ae76-d93e1c38e30c","id":"QR_e108a694-20d2-44ca-ae76-d93e1c38e30c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 01:43:11][356724570655931][7076 ms][DEBUG] proc_open done in 6670 ms; code=255; res.len=3343 [2025-08-23 01:43:11][356724570655931][7076 ms][DEBUG] END runCmdUntilRes#1 in 6670 ms [2025-08-23 01:43:11][356724570655931][7076 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:05:04][354618101068857][1 ms][INFO] === Request start === [2025-08-23 02:05:04][354618101068857][2 ms][DEBUG] START check_scloud [2025-08-23 02:05:04][354618101068857][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:05:04][354618101068857][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 10858 4970 24303920 155864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:05:04][354618101068857][303 ms][DEBUG] targetPkg: running [2025-08-23 02:05:04][354618101068857][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 02:05:04][354618101068857][303 ms][DEBUG] START check_boot_completed [2025-08-23 02:05:04][354618101068857][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:05:05][354618101068857][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:05:05][354618101068857][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:05:05][354618101068857][427 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 02:05:05][354618101068857][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 02:05:05][354618101068857][428 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:05:05][354618101068857][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354618101068857\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5271\"}'\'' -e'"" [2025-08-23 02:05:05][354618101068857][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:05:05][354618101068857][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354618101068857\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5271\"}'\'' -e'"" [2025-08-23 02:05:12][354618101068857][7363 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7045c2b8-ccc3-49d9-920d-f39a871d3e82","id":"QR_7045c2b8-ccc3-49d9-920d-f39a871d3e82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:05:12][354618101068857][7519 ms][DEBUG] proc_open done in 7091 ms; code=255; res.len=3343 [2025-08-23 02:05:12][354618101068857][7519 ms][DEBUG] END runCmdUntilRes#1 in 7092 ms [2025-08-23 02:05:12][354618101068857][7519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:05:18][356556776312374][0 ms][INFO] === Request start === [2025-08-23 02:05:18][356556776312374][1 ms][DEBUG] START check_scloud [2025-08-23 02:05:18][356556776312374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:05:18][356556776312374][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 10858 4970 24502916 166460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:05:18][356556776312374][296 ms][DEBUG] targetPkg: running [2025-08-23 02:05:18][356556776312374][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 02:05:18][356556776312374][296 ms][DEBUG] START check_boot_completed [2025-08-23 02:05:18][356556776312374][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:05:18][356556776312374][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:05:18][356556776312374][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:05:18][356556776312374][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 02:05:18][356556776312374][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 02:05:18][356556776312374][406 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:05:18][356556776312374][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776312374\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3698\"}'\'' -e'"" [2025-08-23 02:05:18][356556776312374][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:05:18][356556776312374][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776312374\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3698\"}'\'' -e'"" [2025-08-23 02:05:23][356556776312374][5342 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b1421f9-9b60-4711-bb0e-809b0380916d","id":"QR_7b1421f9-9b60-4711-bb0e-809b0380916d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:05:23][356556776312374][5498 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-23 02:05:23][356556776312374][5498 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-23 02:05:23][356556776312374][5498 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:12:04][350274358259254][1 ms][INFO] === Request start === [2025-08-23 02:12:04][350274358259254][2 ms][DEBUG] START check_scloud [2025-08-23 02:12:04][350274358259254][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:12:04][350274358259254][253 ms][DEBUG] SU: done in 251 ms; outu0_a118 10858 4970 24617592 177524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:12:04][350274358259254][253 ms][DEBUG] targetPkg: running [2025-08-23 02:12:04][350274358259254][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-23 02:12:04][350274358259254][253 ms][DEBUG] START check_boot_completed [2025-08-23 02:12:04][350274358259254][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:12:04][350274358259254][298 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 02:12:04][350274358259254][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:12:05][350274358259254][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:12:05][350274358259254][345 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 02:12:05][350274358259254][345 ms][DEBUG] START check_internet [2025-08-23 02:12:05][350274358259254][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.626/200.626/200.626/0.000 ms\n [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] check_internet: online [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] END check_internet in 438 ms [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:12:05][350274358259254][783 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274358259254\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4577\"}'\'' -e'"" [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:12:05][350274358259254][783 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274358259254\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4577\"}'\'' -e'"" [2025-08-23 02:12:12][350274358259254][7375 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6621747e-141e-4e10-bcb2-370f8ac72315","id":"QR_6621747e-141e-4e10-bcb2-370f8ac72315","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:12:12][350274358259254][7531 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3343 [2025-08-23 02:12:12][350274358259254][7531 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-23 02:12:12][350274358259254][7531 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:14:05][356130861617939][1 ms][INFO] === Request start === [2025-08-23 02:14:05][356130861617939][2 ms][DEBUG] START check_scloud [2025-08-23 02:14:05][356130861617939][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:14:05][356130861617939][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 10858 4970 24758184 186880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:14:05][356130861617939][309 ms][DEBUG] targetPkg: running [2025-08-23 02:14:05][356130861617939][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 02:14:05][356130861617939][309 ms][DEBUG] START check_boot_completed [2025-08-23 02:14:05][356130861617939][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:14:05][356130861617939][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 02:14:05][356130861617939][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:14:05][356130861617939][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:14:05][356130861617939][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 02:14:05][356130861617939][387 ms][DEBUG] START check_internet [2025-08-23 02:14:05][356130861617939][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.636/258.636/258.636/0.000 ms\n [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] check_internet: online [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] END check_internet in 360 ms [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:14:05][356130861617939][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130861617939\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:14:05][356130861617939][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130861617939\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-23 02:14:11][356130861617939][6105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ff59dde-bfeb-4008-8a1f-2c1a28fb90fc","id":"QR_3ff59dde-bfeb-4008-8a1f-2c1a28fb90fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:14:11][356130861617939][6261 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-23 02:14:11][356130861617939][6261 ms][DEBUG] END runCmdUntilRes#1 in 5513 ms [2025-08-23 02:14:11][356130861617939][6261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:15:04][355317515135472][1 ms][INFO] === Request start === [2025-08-23 02:15:04][355317515135472][2 ms][DEBUG] START check_scloud [2025-08-23 02:15:04][355317515135472][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:15:04][355317515135472][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10858 4970 24917004 186552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:15:04][355317515135472][304 ms][DEBUG] targetPkg: running [2025-08-23 02:15:04][355317515135472][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 02:15:04][355317515135472][304 ms][DEBUG] START check_boot_completed [2025-08-23 02:15:04][355317515135472][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:15:04][355317515135472][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:15:04][355317515135472][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:15:04][355317515135472][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 02:15:04][355317515135472][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 02:15:04][355317515135472][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:15:04][355317515135472][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355317515135472\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5931\"}'\'' -e'"" [2025-08-23 02:15:04][355317515135472][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:15:04][355317515135472][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355317515135472\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5931\"}'\'' -e'"" [2025-08-23 02:15:08][355317515135472][4521 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 02:15:08][355317515135472][4522 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 02:15:08][355317515135472][4522 ms][WARN] Detected error: Process with pid 10858 either refused to load frida-agent, or terminated during injection [2025-08-23 02:15:08][355317515135472][4522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 02:15:08][355317515135472][4662 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 02:15:08][355317515135472][4662 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 02:15:08][355317515135472][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 02:15:08][355317515135472][4787 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 02:15:08][355317515135472][4787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 02:15:09][355317515135472][5021 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 02:15:11][355317515135472][7036 ms][DEBUG] START check_boot_completed [2025-08-23 02:15:11][355317515135472][7036 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:15:11][355317515135472][7083 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:15:11][355317515135472][7083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:15:11][355317515135472][7130 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:15:11][355317515135472][7130 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 02:15:14][355317515135472][10145 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 02:15:14][355317515135472][10145 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355317515135472\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5931\"}'\'' -e'"" [2025-08-23 02:15:20][355317515135472][16456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0447a08f-bd5a-4b3f-8b6d-a11c05c5605c","id":"QR_0447a08f-bd5a-4b3f-8b6d-a11c05c5605c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:15:20][355317515135472][16612 ms][DEBUG] proc_open done in 6467 ms; code=255; res.len=3343 [2025-08-23 02:15:20][355317515135472][16612 ms][DEBUG] END runCmdUntilRes#2 in 6467 ms [2025-08-23 02:15:20][355317515135472][16612 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:18:03][355902956195133][1 ms][INFO] === Request start === [2025-08-23 02:18:03][355902956195133][2 ms][DEBUG] START check_scloud [2025-08-23 02:18:03][355902956195133][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:18:03][355902956195133][291 ms][DEBUG] SU: done in 289 ms; outu0_a118 16125 4970 23512036 127028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:18:03][355902956195133][291 ms][DEBUG] targetPkg: running [2025-08-23 02:18:03][355902956195133][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-23 02:18:03][355902956195133][291 ms][DEBUG] START check_boot_completed [2025-08-23 02:18:03][355902956195133][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:18:03][355902956195133][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 02:18:03][355902956195133][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:18:03][355902956195133][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:18:03][355902956195133][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 02:18:03][355902956195133][385 ms][DEBUG] START check_internet [2025-08-23 02:18:03][355902956195133][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:18:03][355902956195133][822 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.018/202.018/202.018/0.000 ms\n [2025-08-23 02:18:03][355902956195133][822 ms][DEBUG] check_internet: online [2025-08-23 02:18:03][355902956195133][822 ms][DEBUG] END check_internet in 438 ms [2025-08-23 02:18:03][355902956195133][822 ms][DEBUG] rawBody.length=1148 [2025-08-23 02:18:03][355902956195133][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902956195133\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4369\"}'\'' -e'"" [2025-08-23 02:18:03][355902956195133][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:18:03][355902956195133][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902956195133\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4369\"}'\'' -e'"" [2025-08-23 02:18:08][355902956195133][4852 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdbdf66f-3d31-4ca2-a805-688261609452","id":"QR_cdbdf66f-3d31-4ca2-a805-688261609452","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:18:08][355902956195133][5008 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 02:18:08][355902956195133][5008 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 02:18:08][355902956195133][5009 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:20:05][350456240548461][1 ms][INFO] === Request start === [2025-08-23 02:20:05][350456240548461][2 ms][DEBUG] START check_scloud [2025-08-23 02:20:05][350456240548461][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:20:05][350456240548461][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 16125 4970 23661668 137588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:20:05][350456240548461][298 ms][DEBUG] targetPkg: running [2025-08-23 02:20:05][350456240548461][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 02:20:05][350456240548461][298 ms][DEBUG] START check_boot_completed [2025-08-23 02:20:05][350456240548461][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:20:05][350456240548461][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:20:05][350456240548461][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:20:05][350456240548461][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 02:20:05][350456240548461][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 02:20:05][350456240548461][392 ms][DEBUG] START check_internet [2025-08-23 02:20:05][350456240548461][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.515/246.515/246.515/0.000 ms\n [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] check_internet: online [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] END check_internet in 359 ms [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:20:05][350456240548461][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456240548461\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4126\"}'\'' -e'"" [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:20:05][350456240548461][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456240548461\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4126\"}'\'' -e'"" [2025-08-23 02:20:12][350456240548461][7546 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa47ee36-fb2b-4a9d-8218-8975241abd55","id":"QR_fa47ee36-fb2b-4a9d-8218-8975241abd55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:20:12][350456240548461][7702 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-08-23 02:20:12][350456240548461][7702 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-23 02:20:12][350456240548461][7702 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:28:03][353065220989673][1 ms][INFO] === Request start === [2025-08-23 02:28:03][353065220989673][2 ms][DEBUG] START check_scloud [2025-08-23 02:28:03][353065220989673][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:28:03][353065220989673][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 16125 4970 23774140 149364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:28:03][353065220989673][301 ms][DEBUG] targetPkg: running [2025-08-23 02:28:03][353065220989673][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 02:28:03][353065220989673][301 ms][DEBUG] START check_boot_completed [2025-08-23 02:28:03][353065220989673][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:28:03][353065220989673][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 02:28:03][353065220989673][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:28:04][353065220989673][442 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 02:28:04][353065220989673][442 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 02:28:04][353065220989673][442 ms][DEBUG] START check_internet [2025-08-23 02:28:04][353065220989673][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.258/201.258/201.258/0.000 ms\n [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] check_internet: online [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] END check_internet in 500 ms [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] rawBody.length=1148 [2025-08-23 02:28:04][353065220989673][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353065220989673\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6441\"}'\'' -e'"" [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:28:04][353065220989673][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353065220989673\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6441\"}'\'' -e'"" [2025-08-23 02:28:08][353065220989673][4972 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3c49277-7eae-4ffc-bcb7-478d7f491890","id":"QR_e3c49277-7eae-4ffc-bcb7-478d7f491890","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:28:08][353065220989673][5128 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 02:28:08][353065220989673][5128 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 02:28:08][353065220989673][5128 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:36:04][357567914646168][1 ms][INFO] === Request start === [2025-08-23 02:36:04][357567914646168][2 ms][DEBUG] START check_scloud [2025-08-23 02:36:04][357567914646168][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:36:05][357567914646168][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 16125 4970 23924832 161272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:36:05][357567914646168][313 ms][DEBUG] targetPkg: running [2025-08-23 02:36:05][357567914646168][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 02:36:05][357567914646168][313 ms][DEBUG] START check_boot_completed [2025-08-23 02:36:05][357567914646168][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:36:05][357567914646168][342 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 02:36:05][357567914646168][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:36:05][357567914646168][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:36:05][357567914646168][389 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 02:36:05][357567914646168][390 ms][DEBUG] START check_internet [2025-08-23 02:36:05][357567914646168][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.847/196.847/196.847/0.000 ms\n [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] check_internet: online [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] END check_internet in 515 ms [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:36:05][357567914646168][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914646168\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3344\"}'\'' -e'"" [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:36:05][357567914646168][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914646168\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3344\"}'\'' -e'"" [2025-08-23 02:36:12][357567914646168][7388 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c839e74-502b-402e-b7a1-e536fa20a604","id":"QR_2c839e74-502b-402e-b7a1-e536fa20a604","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:36:12][357567914646168][7544 ms][DEBUG] proc_open done in 6639 ms; code=255; res.len=3343 [2025-08-23 02:36:12][357567914646168][7544 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-08-23 02:36:12][357567914646168][7544 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:41:04][350633295081990][1 ms][INFO] === Request start === [2025-08-23 02:41:04][350633295081990][2 ms][DEBUG] START check_scloud [2025-08-23 02:41:04][350633295081990][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:41:04][350633295081990][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 16125 4970 24065424 162324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:41:04][350633295081990][297 ms][DEBUG] targetPkg: running [2025-08-23 02:41:04][350633295081990][297 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 02:41:04][350633295081990][297 ms][DEBUG] START check_boot_completed [2025-08-23 02:41:04][350633295081990][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:41:04][350633295081990][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 02:41:04][350633295081990][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:41:04][350633295081990][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:41:04][350633295081990][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 02:41:04][350633295081990][375 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:41:04][350633295081990][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295081990\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4112\"}'\'' -e'"" [2025-08-23 02:41:04][350633295081990][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:41:04][350633295081990][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295081990\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4112\"}'\'' -e'"" [2025-08-23 02:41:10][350633295081990][5498 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23b19894-c60a-42a1-a1c2-23d6221d8862","id":"QR_23b19894-c60a-42a1-a1c2-23d6221d8862","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:41:10][350633295081990][5655 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-08-23 02:41:10][350633295081990][5655 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-08-23 02:41:10][350633295081990][5655 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:43:03][356769546428343][1 ms][INFO] === Request start === [2025-08-23 02:43:03][356769546428343][2 ms][DEBUG] START check_scloud [2025-08-23 02:43:03][356769546428343][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:43:03][356769546428343][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 16125 4970 24181364 161020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:43:03][356769546428343][294 ms][DEBUG] targetPkg: running [2025-08-23 02:43:03][356769546428343][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 02:43:03][356769546428343][294 ms][DEBUG] START check_boot_completed [2025-08-23 02:43:03][356769546428343][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:43:03][356769546428343][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 02:43:03][356769546428343][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:43:03][356769546428343][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 02:43:03][356769546428343][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 02:43:03][356769546428343][404 ms][DEBUG] rawBody.length=1148 [2025-08-23 02:43:03][356769546428343][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546428343\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4504\"}'\'' -e'"" [2025-08-23 02:43:03][356769546428343][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:43:03][356769546428343][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546428343\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4504\"}'\'' -e'"" [2025-08-23 02:43:07][356769546428343][4543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c159f6b-ab4f-4d1b-a627-01c2ab9e8180","id":"QR_7c159f6b-ab4f-4d1b-a627-01c2ab9e8180","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:43:07][356769546428343][4699 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 02:43:07][356769546428343][4699 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 02:43:07][356769546428343][4699 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:49:04][351351024664379][1 ms][INFO] === Request start === [2025-08-23 02:49:04][351351024664379][2 ms][DEBUG] START check_scloud [2025-08-23 02:49:04][351351024664379][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:49:05][351351024664379][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 16125 4970 24311640 156452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:49:05][351351024664379][300 ms][DEBUG] targetPkg: running [2025-08-23 02:49:05][351351024664379][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 02:49:05][351351024664379][300 ms][DEBUG] START check_boot_completed [2025-08-23 02:49:05][351351024664379][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:49:05][351351024664379][330 ms][DEBUG] ADB: done in 29 ms; out [2025-08-23 02:49:05][351351024664379][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:49:05][351351024664379][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 02:49:05][351351024664379][377 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 02:49:05][351351024664379][377 ms][DEBUG] rawBody.length=1149 [2025-08-23 02:49:05][351351024664379][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024664379\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-08-23 02:49:05][351351024664379][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:49:05][351351024664379][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024664379\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-08-23 02:49:12][351351024664379][7437 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5b8910f-fac6-4345-8982-19f7a0ea987b","id":"QR_d5b8910f-fac6-4345-8982-19f7a0ea987b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:49:12][351351024664379][7594 ms][DEBUG] proc_open done in 7216 ms; code=255; res.len=3343 [2025-08-23 02:49:12][351351024664379][7594 ms][DEBUG] END runCmdUntilRes#1 in 7217 ms [2025-08-23 02:49:12][351351024664379][7594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 02:50:03][353255362615034][0 ms][INFO] === Request start === [2025-08-23 02:50:03][353255362615034][1 ms][DEBUG] START check_scloud [2025-08-23 02:50:03][353255362615034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 02:50:03][353255362615034][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 16125 4970 24439740 167040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 02:50:03][353255362615034][308 ms][DEBUG] targetPkg: running [2025-08-23 02:50:03][353255362615034][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 02:50:03][353255362615034][308 ms][DEBUG] START check_boot_completed [2025-08-23 02:50:03][353255362615034][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 02:50:03][353255362615034][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 02:50:03][353255362615034][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 02:50:03][353255362615034][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 02:50:03][353255362615034][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 02:50:03][353255362615034][417 ms][DEBUG] START check_internet [2025-08-23 02:50:03][353255362615034][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 02:50:04][353255362615034][948 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.419/200.419/200.419/0.000 ms\n [2025-08-23 02:50:04][353255362615034][948 ms][DEBUG] check_internet: online [2025-08-23 02:50:04][353255362615034][948 ms][DEBUG] END check_internet in 531 ms [2025-08-23 02:50:04][353255362615034][948 ms][DEBUG] rawBody.length=1147 [2025-08-23 02:50:04][353255362615034][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255362615034\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9175\"}'\'' -e'"" [2025-08-23 02:50:04][353255362615034][948 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 02:50:04][353255362615034][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255362615034\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9175\"}'\'' -e'"" [2025-08-23 02:50:08][353255362615034][5087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c89ce74-c0a6-43fc-9ca8-a650577b45a9","id":"QR_3c89ce74-c0a6-43fc-9ca8-a650577b45a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 02:50:08][353255362615034][5244 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 02:50:08][353255362615034][5244 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 02:50:08][353255362615034][5244 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:01:04][352749382836514][1 ms][INFO] === Request start === [2025-08-23 03:01:04][352749382836514][2 ms][DEBUG] START check_scloud [2025-08-23 03:01:04][352749382836514][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:01:05][352749382836514][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 16125 4970 24542168 179044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:01:05][352749382836514][306 ms][DEBUG] targetPkg: running [2025-08-23 03:01:05][352749382836514][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 03:01:05][352749382836514][306 ms][DEBUG] START check_boot_completed [2025-08-23 03:01:05][352749382836514][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:01:05][352749382836514][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:01:05][352749382836514][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:01:05][352749382836514][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:01:05][352749382836514][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 03:01:05][352749382836514][416 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:01:05][352749382836514][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382836514\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-08-23 03:01:05][352749382836514][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:01:05][352749382836514][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382836514\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-08-23 03:01:12][352749382836514][7257 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfaf3365-e51d-4c03-8607-56d75f37968e","id":"QR_cfaf3365-e51d-4c03-8607-56d75f37968e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:01:12][352749382836514][7414 ms][DEBUG] proc_open done in 6998 ms; code=255; res.len=3343 [2025-08-23 03:01:12][352749382836514][7414 ms][DEBUG] END runCmdUntilRes#1 in 6998 ms [2025-08-23 03:01:12][352749382836514][7414 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:08:04][356927268424706][1 ms][INFO] === Request start === [2025-08-23 03:08:04][356927268424706][2 ms][DEBUG] START check_scloud [2025-08-23 03:08:04][356927268424706][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:08:05][356927268424706][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 16125 4970 24694972 190072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:08:05][356927268424706][310 ms][DEBUG] targetPkg: running [2025-08-23 03:08:05][356927268424706][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 03:08:05][356927268424706][310 ms][DEBUG] START check_boot_completed [2025-08-23 03:08:05][356927268424706][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:08:05][356927268424706][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 03:08:05][356927268424706][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:08:05][356927268424706][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:08:05][356927268424706][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 03:08:05][356927268424706][419 ms][DEBUG] START check_internet [2025-08-23 03:08:05][356927268424706][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.555/201.555/201.555/0.000 ms\n [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] check_internet: online [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] END check_internet in 500 ms [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:08:05][356927268424706][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268424706\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6085\"}'\'' -e'"" [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:08:05][356927268424706][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268424706\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6085\"}'\'' -e'"" [2025-08-23 03:08:11][356927268424706][6792 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af1e58bd-1207-4f2e-87a2-9ccf6b9cd522","id":"QR_af1e58bd-1207-4f2e-87a2-9ccf6b9cd522","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:08:11][356927268424706][6948 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-23 03:08:11][356927268424706][6948 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-23 03:08:11][356927268424706][6949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:31:04][355139240176609][1 ms][INFO] === Request start === [2025-08-23 03:31:04][355139240176609][2 ms][DEBUG] START check_scloud [2025-08-23 03:31:04][355139240176609][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:31:04][355139240176609][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 16125 4970 24849824 199060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:31:04][355139240176609][309 ms][DEBUG] targetPkg: running [2025-08-23 03:31:04][355139240176609][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 03:31:04][355139240176609][309 ms][DEBUG] START check_boot_completed [2025-08-23 03:31:04][355139240176609][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:31:04][355139240176609][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 03:31:04][355139240176609][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:31:04][355139240176609][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 03:31:04][355139240176609][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 03:31:04][355139240176609][386 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:31:04][355139240176609][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240176609\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-23 03:31:04][355139240176609][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:31:04][355139240176609][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240176609\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-23 03:31:09][355139240176609][5042 ms][DEBUG] proc_open done in 4655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 03:31:09][355139240176609][5042 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-23 03:31:09][355139240176609][5042 ms][WARN] Detected error: Process with pid 16125 either refused to load frida-agent, or terminated during injection [2025-08-23 03:31:09][355139240176609][5042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 03:31:09][355139240176609][5182 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 03:31:09][355139240176609][5182 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 03:31:09][355139240176609][5183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 03:31:09][355139240176609][5307 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 03:31:09][355139240176609][5307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 03:31:09][355139240176609][5496 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 03:31:11][355139240176609][7510 ms][DEBUG] START check_boot_completed [2025-08-23 03:31:11][355139240176609][7510 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:31:11][355139240176609][7557 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:31:11][355139240176609][7557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:31:11][355139240176609][7619 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:31:11][355139240176609][7619 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 03:31:14][355139240176609][10634 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 03:31:14][355139240176609][10634 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240176609\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-23 03:31:19][355139240176609][15727 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c8e9400-9ef6-42a6-8768-20998f0b1afa","id":"QR_8c8e9400-9ef6-42a6-8768-20998f0b1afa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:31:20][355139240176609][15883 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-23 03:31:20][355139240176609][15883 ms][DEBUG] END runCmdUntilRes#2 in 5249 ms [2025-08-23 03:31:20][355139240176609][15883 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:37:05][351864717345437][1 ms][INFO] === Request start === [2025-08-23 03:37:05][351864717345437][2 ms][DEBUG] START check_scloud [2025-08-23 03:37:05][351864717345437][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:37:05][351864717345437][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 20463 4970 23519108 127016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:37:05][351864717345437][323 ms][DEBUG] targetPkg: running [2025-08-23 03:37:05][351864717345437][323 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 03:37:05][351864717345437][323 ms][DEBUG] START check_boot_completed [2025-08-23 03:37:05][351864717345437][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:37:05][351864717345437][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 03:37:05][351864717345437][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:37:05][351864717345437][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 03:37:05][351864717345437][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 03:37:05][351864717345437][416 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:37:05][351864717345437][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717345437\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6157\"}'\'' -e'"" [2025-08-23 03:37:05][351864717345437][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:37:05][351864717345437][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717345437\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6157\"}'\'' -e'"" [2025-08-23 03:37:11][351864717345437][5774 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a34a6f9b-b457-4f83-baab-c6b6831e8b52","id":"QR_a34a6f9b-b457-4f83-baab-c6b6831e8b52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:37:11][351864717345437][5930 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 03:37:11][351864717345437][5931 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 03:37:11][351864717345437][5931 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:39:05][352058606879874][0 ms][INFO] === Request start === [2025-08-23 03:39:05][352058606879874][1 ms][DEBUG] START check_scloud [2025-08-23 03:39:05][352058606879874][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:39:05][352058606879874][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 20463 4970 23645288 138348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:39:05][352058606879874][294 ms][DEBUG] targetPkg: running [2025-08-23 03:39:05][352058606879874][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 03:39:05][352058606879874][294 ms][DEBUG] START check_boot_completed [2025-08-23 03:39:05][352058606879874][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:39:05][352058606879874][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:39:05][352058606879874][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:39:05][352058606879874][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 03:39:05][352058606879874][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 03:39:05][352058606879874][387 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:39:05][352058606879874][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058606879874\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2168\"}'\'' -e'"" [2025-08-23 03:39:05][352058606879874][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:39:05][352058606879874][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058606879874\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2168\"}'\'' -e'"" [2025-08-23 03:39:10][352058606879874][5698 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1d36f0c-c285-4b5f-a9cb-6a639c510e0a","id":"QR_f1d36f0c-c285-4b5f-a9cb-6a639c510e0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:39:10][352058606879874][5855 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-23 03:39:10][352058606879874][5855 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-23 03:39:10][352058606879874][5855 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:39:17][351088105650931][1 ms][INFO] === Request start === [2025-08-23 03:39:17][351088105650931][2 ms][DEBUG] START check_scloud [2025-08-23 03:39:17][351088105650931][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:39:17][351088105650931][245 ms][DEBUG] SU: done in 243 ms; outu0_a118 20463 4970 23806320 150148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:39:17][351088105650931][245 ms][DEBUG] targetPkg: running [2025-08-23 03:39:17][351088105650931][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-23 03:39:17][351088105650931][245 ms][DEBUG] START check_boot_completed [2025-08-23 03:39:17][351088105650931][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:39:17][351088105650931][292 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 03:39:17][351088105650931][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:39:17][351088105650931][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 03:39:17][351088105650931][339 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 03:39:17][351088105650931][339 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:39:17][351088105650931][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088105650931\",\"model\":\"SM-A725M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-08-23 03:39:17][351088105650931][339 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:39:17][351088105650931][339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088105650931\",\"model\":\"SM-A725M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-08-23 03:39:22][351088105650931][5494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2de7164e-06ab-4190-95d1-cc38761593e1","id":"QR_2de7164e-06ab-4190-95d1-cc38761593e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:39:23][351088105650931][5650 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-23 03:39:23][351088105650931][5650 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-23 03:39:23][351088105650931][5650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:40:03][353548759107254][1 ms][INFO] === Request start === [2025-08-23 03:40:03][353548759107254][1 ms][DEBUG] START check_scloud [2025-08-23 03:40:03][353548759107254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:40:03][353548759107254][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20463 4970 23917872 161128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:40:03][353548759107254][301 ms][DEBUG] targetPkg: running [2025-08-23 03:40:03][353548759107254][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 03:40:03][353548759107254][301 ms][DEBUG] START check_boot_completed [2025-08-23 03:40:03][353548759107254][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:40:03][353548759107254][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 03:40:03][353548759107254][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:40:04][353548759107254][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:40:04][353548759107254][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 03:40:04][353548759107254][395 ms][DEBUG] START check_internet [2025-08-23 03:40:04][353548759107254][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 03:40:04][353548759107254][879 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.017/201.017/201.017/0.000 ms\n [2025-08-23 03:40:04][353548759107254][880 ms][DEBUG] check_internet: online [2025-08-23 03:40:04][353548759107254][880 ms][DEBUG] END check_internet in 484 ms [2025-08-23 03:40:04][353548759107254][880 ms][DEBUG] rawBody.length=1148 [2025-08-23 03:40:04][353548759107254][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548759107254\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-23 03:40:04][353548759107254][880 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:40:04][353548759107254][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548759107254\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-23 03:40:08][353548759107254][5113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9fcac1d-0dcf-41bd-861e-123634a8a941","id":"QR_d9fcac1d-0dcf-41bd-861e-123634a8a941","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:40:08][353548759107254][5269 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 03:40:08][353548759107254][5269 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 03:40:08][353548759107254][5269 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:44:05][350437730859683][1 ms][INFO] === Request start === [2025-08-23 03:44:05][350437730859683][2 ms][DEBUG] START check_scloud [2025-08-23 03:44:05][350437730859683][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:44:05][350437730859683][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 20463 4970 24029460 171512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:44:05][350437730859683][302 ms][DEBUG] targetPkg: running [2025-08-23 03:44:05][350437730859683][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 03:44:05][350437730859683][302 ms][DEBUG] START check_boot_completed [2025-08-23 03:44:05][350437730859683][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:44:05][350437730859683][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:44:05][350437730859683][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:44:05][350437730859683][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 03:44:05][350437730859683][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 03:44:05][350437730859683][396 ms][DEBUG] START check_internet [2025-08-23 03:44:05][350437730859683][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.740/201.740/201.740/0.000 ms\n [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] check_internet: online [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] END check_internet in 469 ms [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] rawBody.length=1149 [2025-08-23 03:44:06][350437730859683][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730859683\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7194\"}'\'' -e'"" [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:44:06][350437730859683][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730859683\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7194\"}'\'' -e'"" [2025-08-23 03:44:11][350437730859683][6222 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38cd3f56-6d36-4523-bda3-3105bff4169a","id":"QR_38cd3f56-6d36-4523-bda3-3105bff4169a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:44:11][350437730859683][6379 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-23 03:44:11][350437730859683][6379 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 03:44:11][350437730859683][6379 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:47:03][353472171376019][1 ms][INFO] === Request start === [2025-08-23 03:47:03][353472171376019][2 ms][DEBUG] START check_scloud [2025-08-23 03:47:03][353472171376019][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:47:03][353472171376019][277 ms][DEBUG] SU: done in 275 ms; outu0_a118 20463 4970 24152568 183552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:47:03][353472171376019][277 ms][DEBUG] targetPkg: running [2025-08-23 03:47:03][353472171376019][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 03:47:03][353472171376019][277 ms][DEBUG] START check_boot_completed [2025-08-23 03:47:03][353472171376019][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:47:03][353472171376019][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:47:03][353472171376019][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:47:03][353472171376019][386 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:47:03][353472171376019][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 03:47:03][353472171376019][386 ms][DEBUG] rawBody.length=1148 [2025-08-23 03:47:03][353472171376019][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472171376019\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-08-23 03:47:03][353472171376019][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:47:03][353472171376019][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472171376019\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-08-23 03:47:08][353472171376019][4479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69e39f39-8093-4e84-a921-6cd40036d2f7","id":"QR_69e39f39-8093-4e84-a921-6cd40036d2f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:47:08][353472171376019][4635 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 03:47:08][353472171376019][4635 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 03:47:08][353472171376019][4636 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 03:48:02][354127119258005][0 ms][INFO] === Request start === [2025-08-23 03:48:02][354127119258005][1 ms][DEBUG] START check_scloud [2025-08-23 03:48:02][354127119258005][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 03:48:03][354127119258005][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 20463 4970 24272608 194504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 03:48:03][354127119258005][302 ms][DEBUG] targetPkg: running [2025-08-23 03:48:03][354127119258005][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 03:48:03][354127119258005][302 ms][DEBUG] START check_boot_completed [2025-08-23 03:48:03][354127119258005][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 03:48:03][354127119258005][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 03:48:03][354127119258005][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 03:48:03][354127119258005][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 03:48:03][354127119258005][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 03:48:03][354127119258005][411 ms][DEBUG] START check_internet [2025-08-23 03:48:03][354127119258005][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 03:48:03][354127119258005][973 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.521/201.521/201.521/0.000 ms\n [2025-08-23 03:48:03][354127119258005][974 ms][DEBUG] check_internet: online [2025-08-23 03:48:03][354127119258005][974 ms][DEBUG] END check_internet in 563 ms [2025-08-23 03:48:03][354127119258005][974 ms][DEBUG] rawBody.length=1148 [2025-08-23 03:48:03][354127119258005][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354127119258005\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"E48\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8746\"}'\'' -e'"" [2025-08-23 03:48:03][354127119258005][974 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 03:48:03][354127119258005][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354127119258005\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"E48\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8746\"}'\'' -e'"" [2025-08-23 03:48:07][354127119258005][4769 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d0dfb6d-74f0-413b-94a4-15a55a3af911","id":"QR_2d0dfb6d-74f0-413b-94a4-15a55a3af911","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 03:48:07][354127119258005][4925 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-23 03:48:07][354127119258005][4925 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-23 03:48:07][354127119258005][4925 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:04:04][353245902908312][1 ms][INFO] === Request start === [2025-08-23 04:04:04][353245902908312][2 ms][DEBUG] START check_scloud [2025-08-23 04:04:04][353245902908312][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:04:05][353245902908312][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 20463 4970 24403832 206276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:04:05][353245902908312][312 ms][DEBUG] targetPkg: running [2025-08-23 04:04:05][353245902908312][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 04:04:05][353245902908312][312 ms][DEBUG] START check_boot_completed [2025-08-23 04:04:05][353245902908312][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:04:05][353245902908312][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 04:04:05][353245902908312][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:04:05][353245902908312][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 04:04:05][353245902908312][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 04:04:05][353245902908312][390 ms][DEBUG] START check_internet [2025-08-23 04:04:05][353245902908312][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 04:04:05][353245902908312][874 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.114/203.114/203.114/0.000 ms\n [2025-08-23 04:04:05][353245902908312][874 ms][DEBUG] check_internet: online [2025-08-23 04:04:05][353245902908312][874 ms][DEBUG] END check_internet in 485 ms [2025-08-23 04:04:05][353245902908312][874 ms][DEBUG] rawBody.length=1149 [2025-08-23 04:04:05][353245902908312][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353245902908312\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7126\"}'\'' -e'"" [2025-08-23 04:04:05][353245902908312][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:04:05][353245902908312][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353245902908312\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7126\"}'\'' -e'"" [2025-08-23 04:04:12][353245902908312][7654 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e864cac-5fd8-4620-972c-235c95a644d3","id":"QR_9e864cac-5fd8-4620-972c-235c95a644d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:04:12][353245902908312][7810 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-08-23 04:04:12][353245902908312][7810 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-23 04:04:12][353245902908312][7810 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:04:19][350290812690702][0 ms][INFO] === Request start === [2025-08-23 04:04:19][350290812690702][1 ms][DEBUG] START check_scloud [2025-08-23 04:04:19][350290812690702][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:04:19][350290812690702][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 20463 4970 24576140 218060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:04:19][350290812690702][262 ms][DEBUG] targetPkg: running [2025-08-23 04:04:19][350290812690702][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 04:04:19][350290812690702][262 ms][DEBUG] START check_boot_completed [2025-08-23 04:04:19][350290812690702][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:04:19][350290812690702][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 04:04:19][350290812690702][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:04:19][350290812690702][371 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 04:04:19][350290812690702][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 04:04:19][350290812690702][371 ms][DEBUG] START check_internet [2025-08-23 04:04:19][350290812690702][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.664/232.664/232.664/0.000 ms\n [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] check_internet: online [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] END check_internet in 328 ms [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] rawBody.length=1149 [2025-08-23 04:04:20][350290812690702][699 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812690702\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9163\"}'\'' -e'"" [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:04:20][350290812690702][699 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812690702\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9163\"}'\'' -e'"" [2025-08-23 04:04:26][350290812690702][6760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eebd4008-9eff-46fb-80df-8f93d01d7b35","id":"QR_eebd4008-9eff-46fb-80df-8f93d01d7b35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:04:26][350290812690702][6916 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-08-23 04:04:26][350290812690702][6916 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-08-23 04:04:26][350290812690702][6916 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:08:03][355902955286834][1 ms][INFO] === Request start === [2025-08-23 04:08:03][355902955286834][2 ms][DEBUG] START check_scloud [2025-08-23 04:08:03][355902955286834][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:08:03][355902955286834][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 20463 4970 24689868 228772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:08:03][355902955286834][301 ms][DEBUG] targetPkg: running [2025-08-23 04:08:03][355902955286834][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 04:08:03][355902955286834][301 ms][DEBUG] START check_boot_completed [2025-08-23 04:08:03][355902955286834][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:08:03][355902955286834][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 04:08:03][355902955286834][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:08:03][355902955286834][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 04:08:03][355902955286834][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 04:08:03][355902955286834][379 ms][DEBUG] START check_internet [2025-08-23 04:08:03][355902955286834][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 04:08:04][355902955286834][1082 ms][DEBUG] SU: done in 703 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.405/202.405/202.405/0.000 ms\n [2025-08-23 04:08:04][355902955286834][1082 ms][DEBUG] check_internet: online [2025-08-23 04:08:04][355902955286834][1082 ms][DEBUG] END check_internet in 703 ms [2025-08-23 04:08:04][355902955286834][1082 ms][DEBUG] rawBody.length=1148 [2025-08-23 04:08:04][355902955286834][1083 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902955286834\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9340\"}'\'' -e'"" [2025-08-23 04:08:04][355902955286834][1083 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:08:04][355902955286834][1083 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902955286834\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9340\"}'\'' -e'"" [2025-08-23 04:08:08][355902955286834][5269 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a5c4be9-9f5d-4f68-a3ac-fff078ccb5cd","id":"QR_4a5c4be9-9f5d-4f68-a3ac-fff078ccb5cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:08:08][355902955286834][5425 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-23 04:08:08][355902955286834][5425 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-23 04:08:08][355902955286834][5425 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:10:03][356174382382094][0 ms][INFO] === Request start === [2025-08-23 04:10:03][356174382382094][1 ms][DEBUG] START check_scloud [2025-08-23 04:10:03][356174382382094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:10:04][356174382382094][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20463 4970 24826160 240560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:10:04][356174382382094][311 ms][DEBUG] targetPkg: running [2025-08-23 04:10:04][356174382382094][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 04:10:04][356174382382094][311 ms][DEBUG] START check_boot_completed [2025-08-23 04:10:04][356174382382094][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:10:04][356174382382094][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 04:10:04][356174382382094][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:10:04][356174382382094][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 04:10:04][356174382382094][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 04:10:04][356174382382094][405 ms][DEBUG] START check_internet [2025-08-23 04:10:04][356174382382094][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.603/189.603/189.603/0.000 ms\n [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] check_internet: online [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] END check_internet in 297 ms [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] rawBody.length=1148 [2025-08-23 04:10:04][356174382382094][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174382382094\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:10:04][356174382382094][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174382382094\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-23 04:10:08][356174382382094][4373 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 04:10:08][356174382382094][4373 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-23 04:10:08][356174382382094][4373 ms][WARN] Detected error: Process with pid 20463 either refused to load frida-agent, or terminated during injection [2025-08-23 04:10:08][356174382382094][4373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 04:10:08][356174382382094][4513 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 04:10:08][356174382382094][4513 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 04:10:08][356174382382094][4513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 04:10:08][356174382382094][4670 ms][DEBUG] SU: done in 157 ms; out [2025-08-23 04:10:08][356174382382094][4670 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 04:10:08][356174382382094][4826 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 04:10:10][356174382382094][6841 ms][DEBUG] START check_boot_completed [2025-08-23 04:10:10][356174382382094][6841 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:10:10][356174382382094][6888 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 04:10:10][356174382382094][6888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:10:10][356174382382094][6981 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 04:10:10][356174382382094][6981 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 04:10:13][356174382382094][9996 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 04:10:13][356174382382094][9996 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174382382094\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-23 04:10:17][356174382382094][13917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2530229f-1bfa-44f3-b337-8241a73b0cc0","id":"QR_2530229f-1bfa-44f3-b337-8241a73b0cc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:10:17][356174382382094][14073 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-23 04:10:17][356174382382094][14074 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-23 04:10:17][356174382382094][14074 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:11:04][350011602088141][1 ms][INFO] === Request start === [2025-08-23 04:11:04][350011602088141][2 ms][DEBUG] START check_scloud [2025-08-23 04:11:04][350011602088141][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:11:04][350011602088141][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 22426 4970 23478264 127420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:11:04][350011602088141][311 ms][DEBUG] targetPkg: running [2025-08-23 04:11:04][350011602088141][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 04:11:04][350011602088141][311 ms][DEBUG] START check_boot_completed [2025-08-23 04:11:04][350011602088141][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:11:04][350011602088141][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 04:11:04][350011602088141][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:11:04][350011602088141][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 04:11:04][350011602088141][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 04:11:04][350011602088141][405 ms][DEBUG] rawBody.length=1149 [2025-08-23 04:11:04][350011602088141][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602088141\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6476\"}'\'' -e'"" [2025-08-23 04:11:04][350011602088141][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:11:04][350011602088141][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602088141\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6476\"}'\'' -e'"" [2025-08-23 04:11:10][350011602088141][5732 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e613393-3121-4f09-8363-9969fa17d7d6","id":"QR_4e613393-3121-4f09-8363-9969fa17d7d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:11:10][350011602088141][5888 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-08-23 04:11:10][350011602088141][5888 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-08-23 04:11:10][350011602088141][5888 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:11:14][354255811793167][0 ms][INFO] === Request start === [2025-08-23 04:11:14][354255811793167][1 ms][DEBUG] START check_scloud [2025-08-23 04:11:14][354255811793167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:11:14][354255811793167][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22426 4970 23657024 137388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:11:14][354255811793167][305 ms][DEBUG] targetPkg: running [2025-08-23 04:11:14][354255811793167][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 04:11:14][354255811793167][305 ms][DEBUG] START check_boot_completed [2025-08-23 04:11:14][354255811793167][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:11:14][354255811793167][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 04:11:14][354255811793167][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:11:14][354255811793167][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 04:11:14][354255811793167][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 04:11:14][354255811793167][414 ms][DEBUG] rawBody.length=1148 [2025-08-23 04:11:14][354255811793167][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-08-23 04:11:14][354255811793167][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:11:14][354255811793167][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-08-23 04:11:18][354255811793167][4444 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_166d37d5-e868-45d2-9945-df3d3ea92b69","id":"QR_166d37d5-e868-45d2-9945-df3d3ea92b69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:11:19][354255811793167][4600 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 04:11:19][354255811793167][4600 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 04:11:19][354255811793167][4600 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 04:12:04][355561773187556][0 ms][INFO] === Request start === [2025-08-23 04:12:04][355561773187556][1 ms][DEBUG] START check_scloud [2025-08-23 04:12:04][355561773187556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 04:12:04][355561773187556][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 22426 4970 23804508 149180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 04:12:04][355561773187556][319 ms][DEBUG] targetPkg: running [2025-08-23 04:12:04][355561773187556][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 04:12:04][355561773187556][319 ms][DEBUG] START check_boot_completed [2025-08-23 04:12:04][355561773187556][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 04:12:04][355561773187556][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 04:12:04][355561773187556][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 04:12:04][355561773187556][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 04:12:04][355561773187556][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 04:12:04][355561773187556][428 ms][DEBUG] START check_internet [2025-08-23 04:12:04][355561773187556][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.144/201.144/201.144/0.000 ms\n [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] check_internet: online [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] END check_internet in 468 ms [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] rawBody.length=1149 [2025-08-23 04:12:05][355561773187556][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355561773187556\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9487\"}'\'' -e'"" [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 04:12:05][355561773187556][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355561773187556\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9487\"}'\'' -e'"" [2025-08-23 04:12:10][355561773187556][5848 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_925e4105-1904-4651-ae6a-c464d7b5de48","id":"QR_925e4105-1904-4651-ae6a-c464d7b5de48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 04:12:10][355561773187556][6004 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-23 04:12:10][355561773187556][6004 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-23 04:12:10][355561773187556][6004 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:04:02][351671773415008][1 ms][INFO] === Request start === [2025-08-23 05:04:02][351671773415008][2 ms][DEBUG] START check_scloud [2025-08-23 05:04:02][351671773415008][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:04:03][351671773415008][340 ms][DEBUG] SU: done in 338 ms; outu0_a118 22426 4970 23937476 112420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:04:03][351671773415008][340 ms][DEBUG] targetPkg: running [2025-08-23 05:04:03][351671773415008][340 ms][DEBUG] END check_scloud in 338 ms [2025-08-23 05:04:03][351671773415008][340 ms][DEBUG] START check_boot_completed [2025-08-23 05:04:03][351671773415008][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:04:03][351671773415008][371 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:04:03][351671773415008][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:04:03][351671773415008][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:04:03][351671773415008][418 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:04:03][351671773415008][418 ms][DEBUG] START check_internet [2025-08-23 05:04:03][351671773415008][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.139/201.139/201.139/0.000 ms\n [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] check_internet: online [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] END check_internet in 609 ms [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:04:03][351671773415008][1027 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5288\"}'\'' -e'"" [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:04:03][351671773415008][1027 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5288\"}'\'' -e'"" [2025-08-23 05:04:08][351671773415008][5464 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b4a38db-84ab-41fb-9f03-92afd846fe2e","id":"QR_4b4a38db-84ab-41fb-9f03-92afd846fe2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:04:08][351671773415008][5620 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 05:04:08][351671773415008][5620 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-23 05:04:08][351671773415008][5620 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:10:03][350013884378729][1 ms][INFO] === Request start === [2025-08-23 05:10:03][350013884378729][2 ms][DEBUG] START check_scloud [2025-08-23 05:10:03][350013884378729][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:10:03][350013884378729][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 22426 4970 24117684 114460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:10:03][350013884378729][308 ms][DEBUG] targetPkg: running [2025-08-23 05:10:03][350013884378729][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 05:10:03][350013884378729][308 ms][DEBUG] START check_boot_completed [2025-08-23 05:10:03][350013884378729][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:10:03][350013884378729][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:10:03][350013884378729][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:10:03][350013884378729][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 05:10:03][350013884378729][404 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 05:10:03][350013884378729][404 ms][DEBUG] START check_internet [2025-08-23 05:10:03][350013884378729][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.494/201.494/201.494/0.000 ms\n [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] check_internet: online [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] END check_internet in 435 ms [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:10:04][350013884378729][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3609\"}'\'' -e'"" [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:10:04][350013884378729][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3609\"}'\'' -e'"" [2025-08-23 05:10:08][350013884378729][4979 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-08-23 05:10:08][350013884378729][5135 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=93 [2025-08-23 05:10:08][350013884378729][5135 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 05:10:08][350013884378729][5135 ms][INFO] SUCCESS response from frida (len=93) [2025-08-23 05:10:09][][0 ms][INFO] === Request start === [2025-08-23 05:10:09][][1 ms][DEBUG] START check_scloud [2025-08-23 05:10:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:10:09][][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22426 4970 24291004 121616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:10:09][][317 ms][DEBUG] targetPkg: running [2025-08-23 05:10:09][][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 05:10:09][][317 ms][DEBUG] START check_boot_completed [2025-08-23 05:10:09][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:10:09][][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:10:09][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:10:09][][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:10:09][][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 05:10:09][][411 ms][DEBUG] START check_internet [2025-08-23 05:10:09][][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:10:09][][645 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.243/132.243/132.243/0.000 ms\n [2025-08-23 05:10:09][][646 ms][DEBUG] check_internet: online [2025-08-23 05:10:09][][646 ms][DEBUG] END check_internet in 235 ms [2025-08-23 05:10:09][][646 ms][DEBUG] rawBody.length=1129 [2025-08-23 05:10:09][][646 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3793\"}'\'' -e'"" [2025-08-23 05:10:09][][646 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:10:09][][646 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3793\"}'\'' -e'"" [2025-08-23 05:10:13][][4035 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 05:10:13][][4191 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=107 [2025-08-23 05:10:13][][4191 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-08-23 05:10:13][][4191 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 05:10:15][350013884378729][0 ms][INFO] === Request start === [2025-08-23 05:10:15][350013884378729][1 ms][DEBUG] START check_scloud [2025-08-23 05:10:15][350013884378729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:10:15][350013884378729][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 22426 4970 24412932 129864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:10:15][350013884378729][294 ms][DEBUG] targetPkg: running [2025-08-23 05:10:15][350013884378729][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 05:10:15][350013884378729][295 ms][DEBUG] START check_boot_completed [2025-08-23 05:10:15][350013884378729][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:10:15][350013884378729][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:10:15][350013884378729][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:10:15][350013884378729][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 05:10:15][350013884378729][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 05:10:15][350013884378729][404 ms][DEBUG] START check_internet [2025-08-23 05:10:15][350013884378729][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:10:16][350013884378729][716 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.852/183.852/183.852/0.000 ms\n [2025-08-23 05:10:16][350013884378729][716 ms][DEBUG] check_internet: online [2025-08-23 05:10:16][350013884378729][716 ms][DEBUG] END check_internet in 312 ms [2025-08-23 05:10:16][350013884378729][716 ms][DEBUG] rawBody.length=1149 [2025-08-23 05:10:16][350013884378729][716 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6121\"}'\'' -e'"" [2025-08-23 05:10:16][350013884378729][717 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:10:16][350013884378729][717 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6121\"}'\'' -e'"" [2025-08-23 05:10:20][350013884378729][4949 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 05:10:20][350013884378729][5105 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=115 [2025-08-23 05:10:20][350013884378729][5105 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 05:10:20][350013884378729][5105 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 05:10:20][][0 ms][INFO] === Request start === [2025-08-23 05:10:20][][1 ms][DEBUG] START check_scloud [2025-08-23 05:10:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:10:21][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22426 4970 24576908 139004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:10:21][][308 ms][DEBUG] targetPkg: running [2025-08-23 05:10:21][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 05:10:21][][309 ms][DEBUG] START check_boot_completed [2025-08-23 05:10:21][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:10:21][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:10:21][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:10:21][][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 05:10:21][][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 05:10:21][][418 ms][DEBUG] START check_internet [2025-08-23 05:10:21][][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:10:21][][683 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.942/139.942/139.942/0.000 ms\n [2025-08-23 05:10:21][][683 ms][DEBUG] check_internet: online [2025-08-23 05:10:21][][683 ms][DEBUG] END check_internet in 265 ms [2025-08-23 05:10:21][][683 ms][DEBUG] rawBody.length=1130 [2025-08-23 05:10:21][][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8740\"}'\'' -e'"" [2025-08-23 05:10:21][][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:10:21][][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8740\"}'\'' -e'"" [2025-08-23 05:10:25][][4463 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 05:10:25][][4620 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-08-23 05:10:25][][4620 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 05:10:25][][4620 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 05:11:03][350637540968976][1 ms][INFO] === Request start === [2025-08-23 05:11:03][350637540968976][2 ms][DEBUG] START check_scloud [2025-08-23 05:11:03][350637540968976][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:11:03][350637540968976][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 22426 4970 24666116 145224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:11:03][350637540968976][299 ms][DEBUG] targetPkg: running [2025-08-23 05:11:03][350637540968976][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 05:11:03][350637540968976][299 ms][DEBUG] START check_boot_completed [2025-08-23 05:11:03][350637540968976][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:11:03][350637540968976][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:11:03][350637540968976][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:11:04][350637540968976][379 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 05:11:04][350637540968976][379 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 05:11:04][350637540968976][379 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:11:04][350637540968976][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540968976\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5622\"}'\'' -e'"" [2025-08-23 05:11:04][350637540968976][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:11:04][350637540968976][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540968976\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5622\"}'\'' -e'"" [2025-08-23 05:11:08][350637540968976][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b202842-5b6c-4da1-9ab0-71faf6464af4","id":"QR_5b202842-5b6c-4da1-9ab0-71faf6464af4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:11:08][350637540968976][4642 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=3343 [2025-08-23 05:11:08][350637540968976][4642 ms][DEBUG] END runCmdUntilRes#1 in 4263 ms [2025-08-23 05:11:08][350637540968976][4642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:11:12][350247871038140][0 ms][INFO] === Request start === [2025-08-23 05:11:12][350247871038140][1 ms][DEBUG] START check_scloud [2025-08-23 05:11:12][350247871038140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:11:12][350247871038140][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22426 4970 24802448 155952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:11:12][350247871038140][297 ms][DEBUG] targetPkg: running [2025-08-23 05:11:12][350247871038140][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 05:11:12][350247871038140][298 ms][DEBUG] START check_boot_completed [2025-08-23 05:11:12][350247871038140][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:11:12][350247871038140][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:11:12][350247871038140][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:11:12][350247871038140][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:11:12][350247871038140][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 05:11:12][350247871038140][391 ms][DEBUG] rawBody.length=1149 [2025-08-23 05:11:12][350247871038140][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871038140\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4880\"}'\'' -e'"" [2025-08-23 05:11:12][350247871038140][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:11:12][350247871038140][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871038140\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4880\"}'\'' -e'"" [2025-08-23 05:11:17][350247871038140][5452 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_218a1406-8c9b-44d6-b76c-56d87e5f5c25","id":"QR_218a1406-8c9b-44d6-b76c-56d87e5f5c25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:11:18][350247871038140][5608 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-23 05:11:18][350247871038140][5608 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-23 05:11:18][350247871038140][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:17:05][352631695720355][1 ms][INFO] === Request start === [2025-08-23 05:17:05][352631695720355][2 ms][DEBUG] START check_scloud [2025-08-23 05:17:05][352631695720355][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:17:06][352631695720355][250 ms][DEBUG] SU: done in 248 ms; outu0_a118 22426 4970 24922448 168128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:17:06][352631695720355][250 ms][DEBUG] targetPkg: running [2025-08-23 05:17:06][352631695720355][250 ms][DEBUG] END check_scloud in 248 ms [2025-08-23 05:17:06][352631695720355][250 ms][DEBUG] START check_boot_completed [2025-08-23 05:17:06][352631695720355][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:17:06][352631695720355][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:17:06][352631695720355][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:17:06][352631695720355][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:17:06][352631695720355][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 05:17:06][352631695720355][343 ms][DEBUG] rawBody.length=1159 [2025-08-23 05:17:06][352631695720355][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631695720355\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YT70RBRTL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-08-23 05:17:06][352631695720355][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:17:06][352631695720355][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631695720355\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YT70RBRTL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-08-23 05:17:10][352631695720355][4452 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 05:17:10][352631695720355][4452 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 05:17:10][352631695720355][4452 ms][WARN] Detected error: Process with pid 22426 either refused to load frida-agent, or terminated during injection [2025-08-23 05:17:10][352631695720355][4452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 05:17:10][352631695720355][4592 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 05:17:10][352631695720355][4593 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 05:17:10][352631695720355][4593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 05:17:10][352631695720355][4718 ms][DEBUG] SU: done in 126 ms; out [2025-08-23 05:17:10][352631695720355][4718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 05:17:10][352631695720355][4920 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 05:17:12][352631695720355][6935 ms][DEBUG] START check_boot_completed [2025-08-23 05:17:12][352631695720355][6935 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:17:12][352631695720355][6982 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:17:12][352631695720355][6983 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:17:13][352631695720355][7045 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 05:17:13][352631695720355][7045 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 05:17:16][352631695720355][10060 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 05:17:16][352631695720355][10060 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631695720355\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YT70RBRTL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-08-23 05:17:22][352631695720355][16433 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3736ea0f-febb-4a4d-8a15-321540c99d3e","id":"QR_3736ea0f-febb-4a4d-8a15-321540c99d3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:17:22][352631695720355][16590 ms][DEBUG] proc_open done in 6530 ms; code=255; res.len=3343 [2025-08-23 05:17:22][352631695720355][16590 ms][DEBUG] END runCmdUntilRes#2 in 6530 ms [2025-08-23 05:17:22][352631695720355][16590 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:18:02][352353115634849][1 ms][INFO] === Request start === [2025-08-23 05:18:02][352353115634849][2 ms][DEBUG] START check_scloud [2025-08-23 05:18:02][352353115634849][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:18:03][352353115634849][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 25825 4970 23517168 126396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:18:03][352353115634849][292 ms][DEBUG] targetPkg: running [2025-08-23 05:18:03][352353115634849][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 05:18:03][352353115634849][292 ms][DEBUG] START check_boot_completed [2025-08-23 05:18:03][352353115634849][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:18:03][352353115634849][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:18:03][352353115634849][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:18:03][352353115634849][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:18:03][352353115634849][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:18:03][352353115634849][371 ms][DEBUG] START check_internet [2025-08-23 05:18:03][352353115634849][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.778/200.778/200.778/0.000 ms\n [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] check_internet: online [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] END check_internet in 484 ms [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:18:03][352353115634849][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353115634849\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4745\"}'\'' -e'"" [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:18:03][352353115634849][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353115634849\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4745\"}'\'' -e'"" [2025-08-23 05:18:07][352353115634849][4651 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c4d2a54-b528-40a3-ab05-d89cc92fc3f8","id":"QR_1c4d2a54-b528-40a3-ab05-d89cc92fc3f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:18:07][352353115634849][4807 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-23 05:18:07][352353115634849][4807 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 05:18:07][352353115634849][4807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:20:05][355181110472734][1 ms][INFO] === Request start === [2025-08-23 05:20:05][355181110472734][2 ms][DEBUG] START check_scloud [2025-08-23 05:20:05][355181110472734][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:20:05][355181110472734][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 25825 4970 23658632 137172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:20:05][355181110472734][260 ms][DEBUG] targetPkg: running [2025-08-23 05:20:05][355181110472734][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 05:20:05][355181110472734][260 ms][DEBUG] START check_boot_completed [2025-08-23 05:20:05][355181110472734][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:20:05][355181110472734][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:20:05][355181110472734][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:20:05][355181110472734][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:20:05][355181110472734][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:20:05][355181110472734][339 ms][DEBUG] START check_internet [2025-08-23 05:20:05][355181110472734][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.049/224.049/224.049/0.000 ms\n [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] check_internet: online [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] END check_internet in 328 ms [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] rawBody.length=1158 [2025-08-23 05:20:05][355181110472734][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355181110472734\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W90BM01V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:20:05][355181110472734][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355181110472734\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W90BM01V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-08-23 05:20:09][355181110472734][4900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5da7bc1-6e41-4f72-9085-ad68343fdcd5","id":"QR_e5da7bc1-6e41-4f72-9085-ad68343fdcd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:20:10][355181110472734][5056 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 05:20:10][355181110472734][5056 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 05:20:10][355181110472734][5056 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:25:03][352397453460390][1 ms][INFO] === Request start === [2025-08-23 05:25:03][352397453460390][2 ms][DEBUG] START check_scloud [2025-08-23 05:25:03][352397453460390][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:25:03][352397453460390][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 25825 4970 23817580 149312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:25:03][352397453460390][314 ms][DEBUG] targetPkg: running [2025-08-23 05:25:03][352397453460390][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 05:25:03][352397453460390][314 ms][DEBUG] START check_boot_completed [2025-08-23 05:25:03][352397453460390][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:25:03][352397453460390][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:25:03][352397453460390][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:25:03][352397453460390][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:25:03][352397453460390][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 05:25:03][352397453460390][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:25:03][352397453460390][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453460390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-23 05:25:03][352397453460390][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:25:03][352397453460390][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453460390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-23 05:25:07][352397453460390][4469 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e87e9ba-be49-4b9a-9538-a42b51d78fd3","id":"QR_1e87e9ba-be49-4b9a-9538-a42b51d78fd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:25:07][352397453460390][4625 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-23 05:25:07][352397453460390][4625 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-23 05:25:07][352397453460390][4625 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:40:03][350013884378729][1 ms][INFO] === Request start === [2025-08-23 05:40:03][350013884378729][2 ms][DEBUG] START check_scloud [2025-08-23 05:40:03][350013884378729][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:40:03][350013884378729][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25825 4970 23918148 161088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:40:03][350013884378729][304 ms][DEBUG] targetPkg: running [2025-08-23 05:40:03][350013884378729][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 05:40:03][350013884378729][305 ms][DEBUG] START check_boot_completed [2025-08-23 05:40:03][350013884378729][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:40:03][350013884378729][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:40:03][350013884378729][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:40:03][350013884378729][384 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 05:40:03][350013884378729][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 05:40:03][350013884378729][384 ms][DEBUG] START check_internet [2025-08-23 05:40:03][350013884378729][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.158/202.158/202.158/0.000 ms\n [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] check_internet: online [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] END check_internet in 594 ms [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:40:04][350013884378729][978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2136\"}'\'' -e'"" [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:40:04][350013884378729][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2136\"}'\'' -e'"" [2025-08-23 05:40:08][350013884378729][4897 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-08-23 05:40:08][350013884378729][5053 ms][DEBUG] proc_open done in 4075 ms; code=255; res.len=93 [2025-08-23 05:40:08][350013884378729][5053 ms][DEBUG] END runCmdUntilRes#1 in 4075 ms [2025-08-23 05:40:08][350013884378729][5053 ms][INFO] SUCCESS response from frida (len=93) [2025-08-23 05:40:08][][0 ms][INFO] === Request start === [2025-08-23 05:40:08][][1 ms][DEBUG] START check_scloud [2025-08-23 05:40:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:40:09][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 25825 4970 24120216 171844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:40:09][][310 ms][DEBUG] targetPkg: running [2025-08-23 05:40:09][][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 05:40:09][][310 ms][DEBUG] START check_boot_completed [2025-08-23 05:40:09][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:40:09][][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:40:09][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:40:09][][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:40:09][][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:40:09][][388 ms][DEBUG] START check_internet [2025-08-23 05:40:09][][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:40:09][][653 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.510/149.510/149.510/0.000 ms\n [2025-08-23 05:40:09][][653 ms][DEBUG] check_internet: online [2025-08-23 05:40:09][][653 ms][DEBUG] END check_internet in 266 ms [2025-08-23 05:40:09][][653 ms][DEBUG] rawBody.length=1129 [2025-08-23 05:40:09][][653 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7805\"}'\'' -e'"" [2025-08-23 05:40:09][][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:40:09][][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7805\"}'\'' -e'"" [2025-08-23 05:40:12][][4027 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 05:40:12][][4183 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-23 05:40:12][][4183 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-23 05:40:12][][4183 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 05:40:15][350013884378729][0 ms][INFO] === Request start === [2025-08-23 05:40:15][350013884378729][1 ms][DEBUG] START check_scloud [2025-08-23 05:40:15][350013884378729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:40:15][350013884378729][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 25825 4970 24254560 183340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:40:15][350013884378729][246 ms][DEBUG] targetPkg: running [2025-08-23 05:40:15][350013884378729][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-23 05:40:15][350013884378729][246 ms][DEBUG] START check_boot_completed [2025-08-23 05:40:15][350013884378729][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:40:15][350013884378729][293 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:40:15][350013884378729][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:40:15][350013884378729][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 05:40:15][350013884378729][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 05:40:15][350013884378729][355 ms][DEBUG] START check_internet [2025-08-23 05:40:15][350013884378729][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:40:15][350013884378729][699 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.272/250.272/250.272/0.000 ms\n [2025-08-23 05:40:15][350013884378729][700 ms][DEBUG] check_internet: online [2025-08-23 05:40:15][350013884378729][700 ms][DEBUG] END check_internet in 344 ms [2025-08-23 05:40:15][350013884378729][700 ms][DEBUG] rawBody.length=1149 [2025-08-23 05:40:15][350013884378729][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-08-23 05:40:15][350013884378729][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:40:15][350013884378729][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-08-23 05:40:21][350013884378729][6260 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 05:40:21][350013884378729][6416 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=115 [2025-08-23 05:40:21][350013884378729][6417 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-23 05:40:21][350013884378729][6417 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 05:40:21][][0 ms][INFO] === Request start === [2025-08-23 05:40:21][][1 ms][DEBUG] START check_scloud [2025-08-23 05:40:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:40:22][][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 25825 4970 24376616 194288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:40:22][][302 ms][DEBUG] targetPkg: running [2025-08-23 05:40:22][][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 05:40:22][][302 ms][DEBUG] START check_boot_completed [2025-08-23 05:40:22][][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:40:22][][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:40:22][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:40:22][][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 05:40:22][][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 05:40:22][][396 ms][DEBUG] START check_internet [2025-08-23 05:40:22][][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:40:22][][707 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.302/203.302/203.302/0.000 ms\n [2025-08-23 05:40:22][][707 ms][DEBUG] check_internet: online [2025-08-23 05:40:22][][707 ms][DEBUG] END check_internet in 311 ms [2025-08-23 05:40:22][][707 ms][DEBUG] rawBody.length=1130 [2025-08-23 05:40:22][][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9497\"}'\'' -e'"" [2025-08-23 05:40:22][][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:40:22][][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9497\"}'\'' -e'"" [2025-08-23 05:40:26][][4441 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 05:40:26][][4597 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=115 [2025-08-23 05:40:26][][4597 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-23 05:40:26][][4597 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 05:42:03][350572364382295][1 ms][INFO] === Request start === [2025-08-23 05:42:03][350572364382295][2 ms][DEBUG] START check_scloud [2025-08-23 05:42:03][350572364382295][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:42:04][350572364382295][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 25825 4970 24451488 205720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:42:04][350572364382295][299 ms][DEBUG] targetPkg: running [2025-08-23 05:42:04][350572364382295][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 05:42:04][350572364382295][299 ms][DEBUG] START check_boot_completed [2025-08-23 05:42:04][350572364382295][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:42:04][350572364382295][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:42:04][350572364382295][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:42:04][350572364382295][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:42:04][350572364382295][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:42:04][350572364382295][377 ms][DEBUG] START check_internet [2025-08-23 05:42:04][350572364382295][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:42:04][350572364382295][721 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.116/238.116/238.116/0.000 ms\n [2025-08-23 05:42:04][350572364382295][721 ms][DEBUG] check_internet: online [2025-08-23 05:42:04][350572364382295][721 ms][DEBUG] END check_internet in 344 ms [2025-08-23 05:42:04][350572364382295][721 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:42:04][350572364382295][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364382295\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1045\"}'\'' -e'"" [2025-08-23 05:42:04][350572364382295][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:42:04][350572364382295][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364382295\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1045\"}'\'' -e'"" [2025-08-23 05:42:08][350572364382295][4845 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bd868d9-43f1-426a-a1e3-40c641dff3ff","id":"QR_8bd868d9-43f1-426a-a1e3-40c641dff3ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:42:08][350572364382295][5001 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-23 05:42:08][350572364382295][5001 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-23 05:42:08][350572364382295][5001 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:45:03][350482802719365][1 ms][INFO] === Request start === [2025-08-23 05:45:03][350482802719365][2 ms][DEBUG] START check_scloud [2025-08-23 05:45:03][350482802719365][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:45:04][350482802719365][269 ms][DEBUG] SU: done in 267 ms; outu0_a118 25825 4970 24620164 218020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:45:04][350482802719365][269 ms][DEBUG] targetPkg: running [2025-08-23 05:45:04][350482802719365][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 05:45:04][350482802719365][269 ms][DEBUG] START check_boot_completed [2025-08-23 05:45:04][350482802719365][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:45:04][350482802719365][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:45:04][350482802719365][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:45:04][350482802719365][425 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 05:45:04][350482802719365][426 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-23 05:45:04][350482802719365][426 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:45:04][350482802719365][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482802719365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3983\"}'\'' -e'"" [2025-08-23 05:45:04][350482802719365][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:45:04][350482802719365][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482802719365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3983\"}'\'' -e'"" [2025-08-23 05:45:08][350482802719365][4846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d8121a8-0451-43c0-b4f6-bdc09b2974bb","id":"QR_3d8121a8-0451-43c0-b4f6-bdc09b2974bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:45:08][350482802719365][5002 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-23 05:45:08][350482802719365][5002 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-23 05:45:08][350482802719365][5002 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:50:05][350320365369980][1 ms][INFO] === Request start === [2025-08-23 05:50:05][350320365369980][2 ms][DEBUG] START check_scloud [2025-08-23 05:50:05][350320365369980][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:50:05][350320365369980][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25825 4970 24756456 229076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:50:05][350320365369980][305 ms][DEBUG] targetPkg: running [2025-08-23 05:50:05][350320365369980][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 05:50:05][350320365369980][306 ms][DEBUG] START check_boot_completed [2025-08-23 05:50:05][350320365369980][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:50:05][350320365369980][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 05:50:05][350320365369980][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:50:06][350320365369980][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:50:06][350320365369980][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 05:50:06][350320365369980][384 ms][DEBUG] START check_internet [2025-08-23 05:50:06][350320365369980][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.865/197.865/197.865/0.000 ms\n [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] check_internet: online [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] END check_internet in 484 ms [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] rawBody.length=1149 [2025-08-23 05:50:06][350320365369980][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365369980\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:50:06][350320365369980][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365369980\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-23 05:50:11][350320365369980][6023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5f29ce7-c019-468e-926d-334045706777","id":"QR_a5f29ce7-c019-468e-926d-334045706777","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:50:11][350320365369980][6179 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-23 05:50:11][350320365369980][6179 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-23 05:50:11][350320365369980][6179 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:58:03][351351024664379][1 ms][INFO] === Request start === [2025-08-23 05:58:03][351351024664379][2 ms][DEBUG] START check_scloud [2025-08-23 05:58:03][351351024664379][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:58:04][351351024664379][288 ms][DEBUG] SU: done in 286 ms; outu0_a118 25825 4970 24850816 228020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:58:04][351351024664379][288 ms][DEBUG] targetPkg: running [2025-08-23 05:58:04][351351024664379][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 05:58:04][351351024664379][288 ms][DEBUG] START check_boot_completed [2025-08-23 05:58:04][351351024664379][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:58:04][351351024664379][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:58:04][351351024664379][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:58:04][351351024664379][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 05:58:04][351351024664379][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 05:58:04][351351024664379][398 ms][DEBUG] START check_internet [2025-08-23 05:58:04][351351024664379][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.837/202.837/202.837/0.000 ms\n [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] check_internet: online [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] END check_internet in 484 ms [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] rawBody.length=1149 [2025-08-23 05:58:04][351351024664379][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024664379\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3250\"}'\'' -e'"" [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:58:04][351351024664379][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024664379\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3250\"}'\'' -e'"" [2025-08-23 05:58:08][351351024664379][4646 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 05:58:08][351351024664379][4646 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-23 05:58:08][351351024664379][4646 ms][WARN] Detected error: Process with pid 25825 either refused to load frida-agent, or terminated during injection [2025-08-23 05:58:08][351351024664379][4646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 05:58:08][351351024664379][4772 ms][DEBUG] SU: done in 126 ms; out [2025-08-23 05:58:08][351351024664379][4772 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 05:58:08][351351024664379][4772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 05:58:08][351351024664379][4896 ms][DEBUG] SU: done in 124 ms; out [2025-08-23 05:58:08][351351024664379][4896 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 05:58:08][351351024664379][5053 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 05:58:10][351351024664379][7067 ms][DEBUG] START check_boot_completed [2025-08-23 05:58:10][351351024664379][7068 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:58:10][351351024664379][7115 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 05:58:10][351351024664379][7115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:58:10][351351024664379][7162 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 05:58:10][351351024664379][7162 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 05:58:13][351351024664379][10176 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 05:58:13][351351024664379][10176 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024664379\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3250\"}'\'' -e'"" [2025-08-23 05:58:19][351351024664379][15347 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e57c23f-b0f2-405a-96b6-37e4043425d1","id":"QR_3e57c23f-b0f2-405a-96b6-37e4043425d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:58:19][351351024664379][15503 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 05:58:19][351351024664379][15503 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-08-23 05:58:19][351351024664379][15503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 05:59:03][352539310124954][0 ms][INFO] === Request start === [2025-08-23 05:59:03][352539310124954][1 ms][DEBUG] START check_scloud [2025-08-23 05:59:03][352539310124954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 05:59:03][352539310124954][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 28860 4970 23512560 126732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 05:59:03][352539310124954][299 ms][DEBUG] targetPkg: running [2025-08-23 05:59:03][352539310124954][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 05:59:03][352539310124954][299 ms][DEBUG] START check_boot_completed [2025-08-23 05:59:03][352539310124954][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 05:59:03][352539310124954][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 05:59:03][352539310124954][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 05:59:03][352539310124954][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 05:59:03][352539310124954][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 05:59:03][352539310124954][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 05:59:03][352539310124954][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539310124954\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9498\"}'\'' -e'"" [2025-08-23 05:59:03][352539310124954][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 05:59:03][352539310124954][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539310124954\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9498\"}'\'' -e'"" [2025-08-23 05:59:08][352539310124954][4500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f71d5a7d-9b94-4e3d-bdf6-5a3b654d6edf","id":"QR_f71d5a7d-9b94-4e3d-bdf6-5a3b654d6edf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 05:59:08][352539310124954][4656 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 05:59:08][352539310124954][4656 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 05:59:08][352539310124954][4656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:07:03][351642487273991][1 ms][INFO] === Request start === [2025-08-23 06:07:03][351642487273991][2 ms][DEBUG] START check_scloud [2025-08-23 06:07:03][351642487273991][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:07:03][351642487273991][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 28860 4970 23621016 137756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:07:03][351642487273991][300 ms][DEBUG] targetPkg: running [2025-08-23 06:07:03][351642487273991][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 06:07:03][351642487273991][300 ms][DEBUG] START check_boot_completed [2025-08-23 06:07:03][351642487273991][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:07:03][351642487273991][329 ms][DEBUG] ADB: done in 29 ms; out [2025-08-23 06:07:03][351642487273991][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:07:03][351642487273991][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:07:03][351642487273991][376 ms][DEBUG] END check_boot_completed in 76 ms [2025-08-23 06:07:03][351642487273991][376 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:07:03][351642487273991][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487273991\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9406\"}'\'' -e'"" [2025-08-23 06:07:03][351642487273991][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:07:03][351642487273991][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487273991\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9406\"}'\'' -e'"" [2025-08-23 06:07:07][351642487273991][4437 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae9260eb-0a9a-414c-b364-ce1d12c43e72","id":"QR_ae9260eb-0a9a-414c-b364-ce1d12c43e72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:07:08][351642487273991][4593 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-23 06:07:08][351642487273991][4594 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 06:07:08][351642487273991][4594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:13:03][355014520177264][0 ms][INFO] === Request start === [2025-08-23 06:13:03][355014520177264][0 ms][DEBUG] START check_scloud [2025-08-23 06:13:03][355014520177264][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:13:03][355014520177264][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 28860 4970 23782920 148900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:13:03][355014520177264][261 ms][DEBUG] targetPkg: running [2025-08-23 06:13:03][355014520177264][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 06:13:03][355014520177264][261 ms][DEBUG] START check_boot_completed [2025-08-23 06:13:03][355014520177264][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:13:03][355014520177264][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:13:03][355014520177264][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:13:03][355014520177264][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:13:03][355014520177264][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:13:03][355014520177264][370 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:13:03][355014520177264][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355014520177264\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5895\"}'\'' -e'"" [2025-08-23 06:13:03][355014520177264][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:13:03][355014520177264][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355014520177264\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5895\"}'\'' -e'"" [2025-08-23 06:13:07][355014520177264][4697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3be7ba1-4544-4d6e-8d14-19d8368400ee","id":"QR_c3be7ba1-4544-4d6e-8d14-19d8368400ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:13:07][355014520177264][4853 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 06:13:07][355014520177264][4853 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 06:13:07][355014520177264][4853 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:18:03][350178735174575][1 ms][INFO] === Request start === [2025-08-23 06:18:03][350178735174575][2 ms][DEBUG] START check_scloud [2025-08-23 06:18:03][350178735174575][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:18:03][350178735174575][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 28860 4970 23919148 160536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:18:03][350178735174575][299 ms][DEBUG] targetPkg: running [2025-08-23 06:18:03][350178735174575][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 06:18:03][350178735174575][299 ms][DEBUG] START check_boot_completed [2025-08-23 06:18:03][350178735174575][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:18:03][350178735174575][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 06:18:03][350178735174575][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:18:03][350178735174575][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:18:03][350178735174575][377 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 06:18:03][350178735174575][377 ms][DEBUG] START check_internet [2025-08-23 06:18:03][350178735174575][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:18:04][350178735174575][909 ms][DEBUG] SU: done in 532 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.485/201.485/201.485/0.000 ms\n [2025-08-23 06:18:04][350178735174575][909 ms][DEBUG] check_internet: online [2025-08-23 06:18:04][350178735174575][909 ms][DEBUG] END check_internet in 532 ms [2025-08-23 06:18:04][350178735174575][909 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:18:04][350178735174575][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735174575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-23 06:18:04][350178735174575][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:18:04][350178735174575][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735174575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-23 06:18:08][350178735174575][5048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fb3ecf2-40ad-40c4-8166-19d46845132e","id":"QR_0fb3ecf2-40ad-40c4-8166-19d46845132e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:18:08][350178735174575][5204 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3343 [2025-08-23 06:18:08][350178735174575][5204 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-23 06:18:08][350178735174575][5204 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:22:04][353335860255465][1 ms][INFO] === Request start === [2025-08-23 06:22:04][353335860255465][2 ms][DEBUG] START check_scloud [2025-08-23 06:22:04][353335860255465][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:22:04][353335860255465][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 28860 4970 24065680 171280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:22:04][353335860255465][247 ms][DEBUG] targetPkg: running [2025-08-23 06:22:04][353335860255465][248 ms][DEBUG] END check_scloud in 246 ms [2025-08-23 06:22:04][353335860255465][248 ms][DEBUG] START check_boot_completed [2025-08-23 06:22:04][353335860255465][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:22:04][353335860255465][294 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 06:22:04][353335860255465][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:22:04][353335860255465][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:22:04][353335860255465][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 06:22:04][353335860255465][341 ms][DEBUG] START check_internet [2025-08-23 06:22:04][353335860255465][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:22:05][353335860255465][794 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.530/202.530/202.530/0.000 ms\n [2025-08-23 06:22:05][353335860255465][794 ms][DEBUG] check_internet: online [2025-08-23 06:22:05][353335860255465][794 ms][DEBUG] END check_internet in 453 ms [2025-08-23 06:22:05][353335860255465][794 ms][DEBUG] rawBody.length=1149 [2025-08-23 06:22:05][353335860255465][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335860255465\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2812\"}'\'' -e'"" [2025-08-23 06:22:05][353335860255465][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:22:05][353335860255465][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335860255465\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2812\"}'\'' -e'"" [2025-08-23 06:22:11][353335860255465][6668 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1eca46a4-b9f3-4c2b-bf71-f3723b1ff24c","id":"QR_1eca46a4-b9f3-4c2b-bf71-f3723b1ff24c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:22:11][353335860255465][6824 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-23 06:22:11][353335860255465][6824 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-23 06:22:11][353335860255465][6824 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:28:03][357642299484715][1 ms][INFO] === Request start === [2025-08-23 06:28:03][357642299484715][2 ms][DEBUG] START check_scloud [2025-08-23 06:28:03][357642299484715][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:28:04][357642299484715][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 28860 4970 24195892 183272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:28:04][357642299484715][305 ms][DEBUG] targetPkg: running [2025-08-23 06:28:04][357642299484715][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 06:28:04][357642299484715][305 ms][DEBUG] START check_boot_completed [2025-08-23 06:28:04][357642299484715][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:28:04][357642299484715][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:28:04][357642299484715][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:28:04][357642299484715][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:28:04][357642299484715][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 06:28:04][357642299484715][397 ms][DEBUG] START check_internet [2025-08-23 06:28:04][357642299484715][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.115/199.115/199.115/0.000 ms\n [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] check_internet: online [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] END check_internet in 532 ms [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:28:04][357642299484715][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299484715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:28:04][357642299484715][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299484715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-23 06:28:09][357642299484715][5241 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd2c57d6-6fb2-479e-abeb-2c0f6a9a8165","id":"QR_fd2c57d6-6fb2-479e-abeb-2c0f6a9a8165","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:28:09][357642299484715][5396 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-23 06:28:09][357642299484715][5396 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-23 06:28:09][357642299484715][5397 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:28:41][][3 ms][INFO] === Request start === [2025-08-23 06:28:41][][3 ms][DEBUG] START check_scloud [2025-08-23 06:28:41][][3 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:28:42][][317 ms][DEBUG] SU: done in 313 ms; outu0_a118 28860 4970 24344600 194028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:28:42][][317 ms][DEBUG] targetPkg: running [2025-08-23 06:28:42][][317 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 06:28:42][][317 ms][DEBUG] START check_boot_completed [2025-08-23 06:28:42][][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:28:42][][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:28:42][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:28:42][][1 ms][INFO] === Request start === [2025-08-23 06:28:42][][1 ms][DEBUG] START check_scloud [2025-08-23 06:28:42][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:28:42][][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:28:42][][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:28:42][][426 ms][DEBUG] START check_internet [2025-08-23 06:28:42][][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:28:42][][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 28860 4970 24344600 194028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:28:42][][270 ms][DEBUG] targetPkg: running [2025-08-23 06:28:42][][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-23 06:28:42][][270 ms][DEBUG] START check_boot_completed [2025-08-23 06:28:42][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:28:42][][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:28:42][][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:28:42][][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:28:42][][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:28:42][][379 ms][DEBUG] START check_internet [2025-08-23 06:28:42][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:28:42][][879 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.317/199.317/199.317/0.000 ms\n [2025-08-23 06:28:42][][879 ms][DEBUG] check_internet: online [2025-08-23 06:28:42][][879 ms][DEBUG] END check_internet in 453 ms [2025-08-23 06:28:42][][879 ms][DEBUG] rawBody.length=0 [2025-08-23 06:28:42][][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-08-23 06:28:42][][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:28:42][][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-08-23 06:28:42][][691 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.255/182.255/182.255/0.000 ms\n [2025-08-23 06:28:42][][691 ms][DEBUG] check_internet: online [2025-08-23 06:28:42][][692 ms][DEBUG] END check_internet in 313 ms [2025-08-23 06:28:42][][692 ms][DEBUG] rawBody.length=0 [2025-08-23 06:28:42][][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-08-23 06:28:42][][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:28:42][][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-08-23 06:28:44][][1941 ms][DEBUG] proc_open done in 1249 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-23 06:28:44][][1942 ms][DEBUG] END runCmdUntilRes#1 in 1250 ms [2025-08-23 06:28:44][][1942 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5395 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5395 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-23 06:28:47][][5300 ms][DEBUG] frida res:res:{"code":4000000,"message":"RESOURCE_INVALID_PARAM","data":"Missing device UID from request"}\r\n [2025-08-23 06:28:47][][5456 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=92 [2025-08-23 06:28:47][][5456 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-23 06:28:47][][5456 ms][INFO] SUCCESS response from frida (len=92) [2025-08-23 06:31:03][357026891456620][1 ms][INFO] === Request start === [2025-08-23 06:31:03][357026891456620][2 ms][DEBUG] START check_scloud [2025-08-23 06:31:03][357026891456620][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:31:03][357026891456620][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 28860 4970 24468732 203044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:31:03][357026891456620][292 ms][DEBUG] targetPkg: running [2025-08-23 06:31:03][357026891456620][292 ms][DEBUG] END check_scloud in 290 ms [2025-08-23 06:31:03][357026891456620][292 ms][DEBUG] START check_boot_completed [2025-08-23 06:31:03][357026891456620][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:31:03][357026891456620][337 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 06:31:03][357026891456620][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:31:03][357026891456620][415 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 06:31:03][357026891456620][415 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-23 06:31:03][357026891456620][415 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:31:03][357026891456620][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026891456620\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-08-23 06:31:03][357026891456620][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:31:03][357026891456620][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026891456620\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-08-23 06:31:08][357026891456620][4898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ac20ac0-c561-43ec-879d-780ea596741b","id":"QR_5ac20ac0-c561-43ec-879d-780ea596741b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:31:08][357026891456620][5055 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-23 06:31:08][357026891456620][5055 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-08-23 06:31:08][357026891456620][5055 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:31:10][351877471296471][0 ms][INFO] === Request start === [2025-08-23 06:31:10][351877471296471][1 ms][DEBUG] START check_scloud [2025-08-23 06:31:10][351877471296471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:31:11][351877471296471][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 28860 4970 24591804 208296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:31:11][351877471296471][308 ms][DEBUG] targetPkg: running [2025-08-23 06:31:11][351877471296471][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 06:31:11][351877471296471][308 ms][DEBUG] START check_boot_completed [2025-08-23 06:31:11][351877471296471][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:31:11][351877471296471][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 06:31:11][351877471296471][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:31:11][351877471296471][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:31:11][351877471296471][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 06:31:11][351877471296471][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:31:11][351877471296471][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471296471\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4587\"}'\'' -e'"" [2025-08-23 06:31:11][351877471296471][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:31:11][351877471296471][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471296471\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4587\"}'\'' -e'"" [2025-08-23 06:31:14][351877471296471][4118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ae0a513-0d1b-4d26-ba9d-040dedd4db43","id":"QR_1ae0a513-0d1b-4d26-ba9d-040dedd4db43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:31:15][351877471296471][4274 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-23 06:31:15][351877471296471][4274 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 06:31:15][351877471296471][4274 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:38:03][352192663192408][1 ms][INFO] === Request start === [2025-08-23 06:38:03][352192663192408][2 ms][DEBUG] START check_scloud [2025-08-23 06:38:03][352192663192408][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:38:03][352192663192408][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 28860 4970 24710708 219484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:38:03][352192663192408][307 ms][DEBUG] targetPkg: running [2025-08-23 06:38:03][352192663192408][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 06:38:03][352192663192408][307 ms][DEBUG] START check_boot_completed [2025-08-23 06:38:03][352192663192408][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:38:03][352192663192408][338 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 06:38:03][352192663192408][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:38:03][352192663192408][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:38:03][352192663192408][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 06:38:03][352192663192408][385 ms][DEBUG] START check_internet [2025-08-23 06:38:03][352192663192408][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:38:04][352192663192408][994 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.505/201.505/201.505/0.000 ms\n [2025-08-23 06:38:04][352192663192408][994 ms][DEBUG] check_internet: online [2025-08-23 06:38:04][352192663192408][994 ms][DEBUG] END check_internet in 610 ms [2025-08-23 06:38:04][352192663192408][994 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:38:04][352192663192408][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192663192408\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1776\"}'\'' -e'"" [2025-08-23 06:38:04][352192663192408][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:38:04][352192663192408][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192663192408\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1776\"}'\'' -e'"" [2025-08-23 06:38:08][352192663192408][5009 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e4a808a-44f5-4134-b674-e65f7d4797a0","id":"QR_5e4a808a-44f5-4134-b674-e65f7d4797a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:38:08][352192663192408][5165 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 06:38:08][352192663192408][5165 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 06:38:08][352192663192408][5165 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:43:03][351550581527701][1 ms][INFO] === Request start === [2025-08-23 06:43:03][351550581527701][2 ms][DEBUG] START check_scloud [2025-08-23 06:43:03][351550581527701][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:43:03][351550581527701][293 ms][DEBUG] SU: done in 291 ms; outu0_a118 28860 4970 24870756 228252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:43:03][351550581527701][293 ms][DEBUG] targetPkg: running [2025-08-23 06:43:03][351550581527701][293 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 06:43:03][351550581527701][293 ms][DEBUG] START check_boot_completed [2025-08-23 06:43:03][351550581527701][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:43:03][351550581527701][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 06:43:03][351550581527701][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:43:03][351550581527701][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:43:03][351550581527701][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 06:43:03][351550581527701][371 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:43:03][351550581527701][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550581527701\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6643\"}'\'' -e'"" [2025-08-23 06:43:03][351550581527701][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:43:03][351550581527701][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550581527701\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6643\"}'\'' -e'"" [2025-08-23 06:43:08][351550581527701][4713 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 06:43:08][351550581527701][4713 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-23 06:43:08][351550581527701][4713 ms][WARN] Detected error: Process with pid 28860 either refused to load frida-agent, or terminated during injection [2025-08-23 06:43:08][351550581527701][4713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 06:43:08][351550581527701][4839 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 06:43:08][351550581527701][4839 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 06:43:08][351550581527701][4839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 06:43:08][351550581527701][4963 ms][DEBUG] SU: done in 124 ms; out [2025-08-23 06:43:08][351550581527701][4964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 06:43:08][351550581527701][5135 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 06:43:10][351550581527701][7150 ms][DEBUG] START check_boot_completed [2025-08-23 06:43:10][351550581527701][7150 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:43:10][351550581527701][7197 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 06:43:10][351550581527701][7197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:43:10][351550581527701][7260 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:43:10][351550581527701][7260 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:43:13][351550581527701][10274 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 06:43:13][351550581527701][10275 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550581527701\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6643\"}'\'' -e'"" [2025-08-23 06:43:17][351550581527701][14524 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4531dc07-0ddf-48f8-be67-540693165401","id":"QR_4531dc07-0ddf-48f8-be67-540693165401","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:43:18][351550581527701][14680 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 06:43:18][351550581527701][14680 ms][DEBUG] END runCmdUntilRes#2 in 4405 ms [2025-08-23 06:43:18][351550581527701][14680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:44:05][352749388536373][0 ms][INFO] === Request start === [2025-08-23 06:44:05][352749388536373][1 ms][DEBUG] START check_scloud [2025-08-23 06:44:05][352749388536373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:44:05][352749388536373][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31674 4970 23493524 126676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:44:05][352749388536373][308 ms][DEBUG] targetPkg: running [2025-08-23 06:44:05][352749388536373][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 06:44:05][352749388536373][308 ms][DEBUG] START check_boot_completed [2025-08-23 06:44:05][352749388536373][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:44:05][352749388536373][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:44:05][352749388536373][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:44:05][352749388536373][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 06:44:05][352749388536373][404 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 06:44:05][352749388536373][404 ms][DEBUG] START check_internet [2025-08-23 06:44:05][352749388536373][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:44:06][352749388536373][870 ms][DEBUG] SU: done in 466 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.325/202.325/202.325/0.000 ms\n [2025-08-23 06:44:06][352749388536373][871 ms][DEBUG] check_internet: online [2025-08-23 06:44:06][352749388536373][871 ms][DEBUG] END check_internet in 467 ms [2025-08-23 06:44:06][352749388536373][871 ms][DEBUG] rawBody.length=1149 [2025-08-23 06:44:06][352749388536373][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749388536373\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7862\"}'\'' -e'"" [2025-08-23 06:44:06][352749388536373][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:44:06][352749388536373][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749388536373\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7862\"}'\'' -e'"" [2025-08-23 06:44:12][352749388536373][6744 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68fa8b6c-322b-455b-9df2-f30588c07d71","id":"QR_68fa8b6c-322b-455b-9df2-f30588c07d71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:44:12][352749388536373][6900 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-23 06:44:12][352749388536373][6900 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-23 06:44:12][352749388536373][6900 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:49:02][355291290682026][1 ms][INFO] === Request start === [2025-08-23 06:49:02][355291290682026][2 ms][DEBUG] START check_scloud [2025-08-23 06:49:02][355291290682026][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:49:03][355291290682026][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31674 4970 23606984 137288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:49:03][355291290682026][308 ms][DEBUG] targetPkg: running [2025-08-23 06:49:03][355291290682026][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 06:49:03][355291290682026][308 ms][DEBUG] START check_boot_completed [2025-08-23 06:49:03][355291290682026][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:49:03][355291290682026][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 06:49:03][355291290682026][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:49:03][355291290682026][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:49:03][355291290682026][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 06:49:03][355291290682026][402 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:49:03][355291290682026][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290682026\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6990\"}'\'' -e'"" [2025-08-23 06:49:03][355291290682026][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:49:03][355291290682026][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290682026\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6990\"}'\'' -e'"" [2025-08-23 06:49:07][355291290682026][4369 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd798562-c564-45ca-9b6c-0f213e78478b","id":"QR_cd798562-c564-45ca-9b6c-0f213e78478b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:49:07][355291290682026][4525 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-23 06:49:07][355291290682026][4526 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-23 06:49:07][355291290682026][4526 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:51:03][351494692325251][1 ms][INFO] === Request start === [2025-08-23 06:51:03][351494692325251][2 ms][DEBUG] START check_scloud [2025-08-23 06:51:03][351494692325251][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:51:03][351494692325251][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 31674 4970 23763884 149744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:51:03][351494692325251][302 ms][DEBUG] targetPkg: running [2025-08-23 06:51:03][351494692325251][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 06:51:03][351494692325251][302 ms][DEBUG] START check_boot_completed [2025-08-23 06:51:03][351494692325251][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:51:03][351494692325251][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:51:03][351494692325251][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:51:03][351494692325251][442 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 06:51:03][351494692325251][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 06:51:03][351494692325251][443 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:51:03][351494692325251][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494692325251\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1744\"}'\'' -e'"" [2025-08-23 06:51:03][351494692325251][443 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:51:03][351494692325251][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494692325251\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1744\"}'\'' -e'"" [2025-08-23 06:51:07][351494692325251][4660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9f82883-8c26-4e11-ad84-05512a25b56e","id":"QR_d9f82883-8c26-4e11-ad84-05512a25b56e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:51:08][351494692325251][4816 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 06:51:08][351494692325251][4816 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 06:51:08][351494692325251][4816 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:52:02][351550587948547][1 ms][INFO] === Request start === [2025-08-23 06:52:02][351550587948547][2 ms][DEBUG] START check_scloud [2025-08-23 06:52:02][351550587948547][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:52:03][351550587948547][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 31674 4970 23887952 160836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:52:03][351550587948547][309 ms][DEBUG] targetPkg: running [2025-08-23 06:52:03][351550587948547][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 06:52:03][351550587948547][309 ms][DEBUG] START check_boot_completed [2025-08-23 06:52:03][351550587948547][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:52:03][351550587948547][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 06:52:03][351550587948547][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:52:03][351550587948547][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 06:52:03][351550587948547][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 06:52:03][351550587948547][402 ms][DEBUG] START check_internet [2025-08-23 06:52:03][351550587948547][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:52:03][351550587948547][840 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.355/202.355/202.355/0.000 ms\n [2025-08-23 06:52:03][351550587948547][840 ms][DEBUG] check_internet: online [2025-08-23 06:52:03][351550587948547][840 ms][DEBUG] END check_internet in 438 ms [2025-08-23 06:52:03][351550587948547][840 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:52:03][351550587948547][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550587948547\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-08-23 06:52:03][351550587948547][840 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:52:03][351550587948547][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550587948547\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-08-23 06:52:07][351550587948547][4870 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a31f642-fc1e-44ee-bbb9-49e461847414","id":"QR_1a31f642-fc1e-44ee-bbb9-49e461847414","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:52:07][351550587948547][5026 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 06:52:07][351550587948547][5026 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 06:52:07][351550587948547][5026 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:56:03][357674438623614][1 ms][INFO] === Request start === [2025-08-23 06:56:03][357674438623614][2 ms][DEBUG] START check_scloud [2025-08-23 06:56:03][357674438623614][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:56:03][357674438623614][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31674 4970 24016052 171808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:56:03][357674438623614][306 ms][DEBUG] targetPkg: running [2025-08-23 06:56:03][357674438623614][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 06:56:03][357674438623614][306 ms][DEBUG] START check_boot_completed [2025-08-23 06:56:03][357674438623614][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:56:03][357674438623614][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:56:03][357674438623614][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:56:03][357674438623614][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 06:56:03][357674438623614][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 06:56:03][357674438623614][402 ms][DEBUG] START check_internet [2025-08-23 06:56:03][357674438623614][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:56:04][357674438623614][884 ms][DEBUG] SU: done in 482 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.543/202.543/202.543/0.000 ms\n [2025-08-23 06:56:04][357674438623614][884 ms][DEBUG] check_internet: online [2025-08-23 06:56:04][357674438623614][884 ms][DEBUG] END check_internet in 483 ms [2025-08-23 06:56:04][357674438623614][884 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:56:04][357674438623614][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438623614\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6732\"}'\'' -e'"" [2025-08-23 06:56:04][357674438623614][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:56:04][357674438623614][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438623614\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6732\"}'\'' -e'"" [2025-08-23 06:56:08][357674438623614][5305 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62395292-e6da-464a-bcbc-b4157e903890","id":"QR_62395292-e6da-464a-bcbc-b4157e903890","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:56:08][357674438623614][5461 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-23 06:56:08][357674438623614][5461 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-23 06:56:08][357674438623614][5461 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 06:58:03][352060486503335][0 ms][INFO] === Request start === [2025-08-23 06:58:03][352060486503335][1 ms][DEBUG] START check_scloud [2025-08-23 06:58:03][352060486503335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:58:03][352060486503335][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31674 4970 24151768 183584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:58:03][352060486503335][309 ms][DEBUG] targetPkg: running [2025-08-23 06:58:03][352060486503335][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 06:58:03][352060486503335][309 ms][DEBUG] START check_boot_completed [2025-08-23 06:58:03][352060486503335][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:58:03][352060486503335][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 06:58:03][352060486503335][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:58:03][352060486503335][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:58:03][352060486503335][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:58:03][352060486503335][418 ms][DEBUG] START check_internet [2025-08-23 06:58:03][352060486503335][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 06:58:13][352060486503335][10541 ms][DEBUG] SU: done in 10122 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, 100% packet loss, time 0ms\n\n [2025-08-23 06:58:13][352060486503335][10541 ms][WARN] check_internet: offline [2025-08-23 06:58:13][352060486503335][10541 ms][DEBUG] END check_internet in 10123 ms [2025-08-23 06:59:03][352060486503335][1 ms][INFO] === Request start === [2025-08-23 06:59:03][352060486503335][2 ms][DEBUG] START check_scloud [2025-08-23 06:59:03][352060486503335][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 06:59:03][352060486503335][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 31674 4970 24151768 183636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 06:59:03][352060486503335][308 ms][DEBUG] targetPkg: running [2025-08-23 06:59:03][352060486503335][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 06:59:03][352060486503335][308 ms][DEBUG] START check_boot_completed [2025-08-23 06:59:03][352060486503335][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 06:59:03][352060486503335][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 06:59:03][352060486503335][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 06:59:03][352060486503335][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 06:59:03][352060486503335][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 06:59:03][352060486503335][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 06:59:03][352060486503335][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486503335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7928\"}'\'' -e'"" [2025-08-23 06:59:03][352060486503335][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 06:59:03][352060486503335][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486503335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7928\"}'\'' -e'"" [2025-08-23 06:59:08][352060486503335][4650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f527230-a30f-41c9-bd0f-81539a9b5f3e","id":"QR_0f527230-a30f-41c9-bd0f-81539a9b5f3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 06:59:08][352060486503335][4806 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 06:59:08][352060486503335][4807 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 06:59:08][352060486503335][4807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:00:04][354106703435120][1 ms][INFO] === Request start === [2025-08-23 07:00:04][354106703435120][2 ms][DEBUG] START check_scloud [2025-08-23 07:00:04][354106703435120][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:00:04][354106703435120][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 31674 4970 24262588 194580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:00:04][354106703435120][319 ms][DEBUG] targetPkg: running [2025-08-23 07:00:04][354106703435120][319 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 07:00:04][354106703435120][319 ms][DEBUG] START check_boot_completed [2025-08-23 07:00:04][354106703435120][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:00:04][354106703435120][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:00:04][354106703435120][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:00:04][354106703435120][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:00:04][354106703435120][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:00:04][354106703435120][397 ms][DEBUG] START check_internet [2025-08-23 07:00:04][354106703435120][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.368/202.368/202.368/0.000 ms\n [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] check_internet: online [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] END check_internet in 594 ms [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] rawBody.length=1149 [2025-08-23 07:00:05][354106703435120][991 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106703435120\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:00:05][354106703435120][991 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106703435120\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-08-23 07:00:10][354106703435120][6239 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed598051-7615-4618-bc5c-153de898e2c6","id":"QR_ed598051-7615-4618-bc5c-153de898e2c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:00:10][354106703435120][6395 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-23 07:00:10][354106703435120][6396 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-23 07:00:10][354106703435120][6396 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:01:03][350938280475739][0 ms][INFO] === Request start === [2025-08-23 07:01:03][350938280475739][1 ms][DEBUG] START check_scloud [2025-08-23 07:01:03][350938280475739][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:01:03][350938280475739][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 31674 4970 24417440 206832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:01:03][350938280475739][314 ms][DEBUG] targetPkg: running [2025-08-23 07:01:03][350938280475739][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 07:01:03][350938280475739][314 ms][DEBUG] START check_boot_completed [2025-08-23 07:01:03][350938280475739][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:01:03][350938280475739][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:01:03][350938280475739][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:01:03][350938280475739][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:01:03][350938280475739][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:01:03][350938280475739][423 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:01:03][350938280475739][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280475739\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5643\"}'\'' -e'"" [2025-08-23 07:01:03][350938280475739][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:01:03][350938280475739][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280475739\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5643\"}'\'' -e'"" [2025-08-23 07:01:08][350938280475739][4609 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60077b1f-cbff-47ae-bd03-2a9f4fe16e55","id":"QR_60077b1f-cbff-47ae-bd03-2a9f4fe16e55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:01:08][350938280475739][4765 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-23 07:01:08][350938280475739][4766 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-23 07:01:08][350938280475739][4766 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:05:03][351828114153967][1 ms][INFO] === Request start === [2025-08-23 07:05:03][351828114153967][2 ms][DEBUG] START check_scloud [2025-08-23 07:05:03][351828114153967][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:05:03][351828114153967][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 31674 4970 24540576 186524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:05:03][351828114153967][317 ms][DEBUG] targetPkg: running [2025-08-23 07:05:03][351828114153967][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 07:05:03][351828114153967][317 ms][DEBUG] START check_boot_completed [2025-08-23 07:05:03][351828114153967][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:05:03][351828114153967][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:05:03][351828114153967][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:05:03][351828114153967][457 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 07:05:03][351828114153967][457 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 07:05:03][351828114153967][457 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:05:03][351828114153967][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828114153967\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-23 07:05:03][351828114153967][457 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:05:03][351828114153967][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828114153967\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-23 07:05:07][351828114153967][4597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0fd58cb-91be-4362-a567-6cca1c1873ed","id":"QR_b0fd58cb-91be-4362-a567-6cca1c1873ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:05:07][351828114153967][4753 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 07:05:07][351828114153967][4753 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 07:05:07][351828114153967][4753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:12:02][352288963949396][1 ms][INFO] === Request start === [2025-08-23 07:12:02][352288963949396][2 ms][DEBUG] START check_scloud [2025-08-23 07:12:02][352288963949396][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:12:03][352288963949396][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 31674 4970 24669628 177912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:12:03][352288963949396][326 ms][DEBUG] targetPkg: running [2025-08-23 07:12:03][352288963949396][327 ms][DEBUG] END check_scloud in 325 ms [2025-08-23 07:12:03][352288963949396][327 ms][DEBUG] START check_boot_completed [2025-08-23 07:12:03][352288963949396][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:12:03][352288963949396][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:12:03][352288963949396][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:12:03][352288963949396][452 ms][DEBUG] SU: done in 79 ms; out [2025-08-23 07:12:03][352288963949396][452 ms][DEBUG] END check_boot_completed in 126 ms [2025-08-23 07:12:03][352288963949396][452 ms][DEBUG] START check_internet [2025-08-23 07:12:03][352288963949396][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:12:03][352288963949396][935 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.445/202.445/202.445/0.000 ms\n [2025-08-23 07:12:03][352288963949396][936 ms][DEBUG] check_internet: online [2025-08-23 07:12:03][352288963949396][936 ms][DEBUG] END check_internet in 483 ms [2025-08-23 07:12:03][352288963949396][936 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:12:03][352288963949396][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963949396\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6926\"}'\'' -e'"" [2025-08-23 07:12:03][352288963949396][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:12:03][352288963949396][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963949396\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6926\"}'\'' -e'"" [2025-08-23 07:12:08][352288963949396][5294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8a77b82-fce1-460d-a850-24f4caa7cba4","id":"QR_d8a77b82-fce1-460d-a850-24f4caa7cba4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:12:08][352288963949396][5450 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-23 07:12:08][352288963949396][5450 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-23 07:12:08][352288963949396][5450 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:15:03][357518810857342][1 ms][INFO] === Request start === [2025-08-23 07:15:03][357518810857342][2 ms][DEBUG] START check_scloud [2025-08-23 07:15:03][357518810857342][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:15:04][357518810857342][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 31674 4970 24829612 176428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:15:04][357518810857342][299 ms][DEBUG] targetPkg: running [2025-08-23 07:15:04][357518810857342][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 07:15:04][357518810857342][299 ms][DEBUG] START check_boot_completed [2025-08-23 07:15:04][357518810857342][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:15:04][357518810857342][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:15:04][357518810857342][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:15:04][357518810857342][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:15:04][357518810857342][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:15:04][357518810857342][377 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:15:04][357518810857342][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518810857342\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4418\"}'\'' -e'"" [2025-08-23 07:15:04][357518810857342][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:15:04][357518810857342][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518810857342\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4418\"}'\'' -e'"" [2025-08-23 07:15:08][357518810857342][4157 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 07:15:08][357518810857342][4157 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-23 07:15:08][357518810857342][4158 ms][WARN] Detected error: Process with pid 31674 either refused to load frida-agent, or terminated during injection [2025-08-23 07:15:08][357518810857342][4158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 07:15:08][357518810857342][4313 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 07:15:08][357518810857342][4314 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 07:15:08][357518810857342][4314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 07:15:08][357518810857342][4470 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 07:15:08][357518810857342][4470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 07:15:08][357518810857342][4704 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 07:15:10][357518810857342][6719 ms][DEBUG] START check_boot_completed [2025-08-23 07:15:10][357518810857342][6719 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:15:10][357518810857342][6766 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:15:10][357518810857342][6766 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:15:10][357518810857342][6813 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:15:10][357518810857342][6813 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 07:15:13][357518810857342][9828 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 07:15:13][357518810857342][9828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518810857342\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4418\"}'\'' -e'"" [2025-08-23 07:15:17][357518810857342][13983 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b285a18b-605b-40a4-ab1a-bbbcc2dc9ed7","id":"QR_b285a18b-605b-40a4-ab1a-bbbcc2dc9ed7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:15:18][357518810857342][14139 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 07:15:18][357518810857342][14139 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-23 07:15:18][357518810857342][14139 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:16:04][354916443626717][0 ms][INFO] === Request start === [2025-08-23 07:16:04][354916443626717][1 ms][DEBUG] START check_scloud [2025-08-23 07:16:04][354916443626717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:16:05][354916443626717][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 2376 4970 23431960 125432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:16:05][354916443626717][266 ms][DEBUG] targetPkg: running [2025-08-23 07:16:05][354916443626717][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 07:16:05][354916443626717][266 ms][DEBUG] START check_boot_completed [2025-08-23 07:16:05][354916443626717][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:16:05][354916443626717][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:16:05][354916443626717][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:16:05][354916443626717][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:16:05][354916443626717][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 07:16:05][354916443626717][359 ms][DEBUG] START check_internet [2025-08-23 07:16:05][354916443626717][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.001/203.001/203.001/0.000 ms\n [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] check_internet: online [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] END check_internet in 469 ms [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:16:05][354916443626717][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:16:05][354916443626717][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-08-23 07:16:09][354916443626717][4233 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 07:16:09][354916443626717][4389 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-23 07:16:09][354916443626717][4389 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-23 07:16:09][354916443626717][4389 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 07:16:09][][0 ms][INFO] === Request start === [2025-08-23 07:16:09][][1 ms][DEBUG] START check_scloud [2025-08-23 07:16:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:16:09][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 2376 4970 23588768 135688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:16:09][][308 ms][DEBUG] targetPkg: running [2025-08-23 07:16:09][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 07:16:09][][308 ms][DEBUG] START check_boot_completed [2025-08-23 07:16:09][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:16:10][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:16:10][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:16:10][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:16:10][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:16:10][][386 ms][DEBUG] START check_internet [2025-08-23 07:16:10][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:16:10][][636 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.282/139.282/139.282/0.000 ms\n [2025-08-23 07:16:10][][636 ms][DEBUG] check_internet: online [2025-08-23 07:16:10][][636 ms][DEBUG] END check_internet in 250 ms [2025-08-23 07:16:10][][636 ms][DEBUG] rawBody.length=1129 [2025-08-23 07:16:10][][636 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40XL0JB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4046\"}'\'' -e'"" [2025-08-23 07:16:10][][636 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:16:10][][636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40XL0JB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4046\"}'\'' -e'"" [2025-08-23 07:16:14][][4338 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 07:16:14][][4494 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-23 07:16:14][][4494 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 07:16:14][][4494 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 07:16:16][354916443626717][0 ms][INFO] === Request start === [2025-08-23 07:16:16][354916443626717][1 ms][DEBUG] START check_scloud [2025-08-23 07:16:16][354916443626717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:16:16][354916443626717][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 2376 4970 23747688 147400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:16:16][354916443626717][276 ms][DEBUG] targetPkg: running [2025-08-23 07:16:16][354916443626717][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 07:16:16][354916443626717][276 ms][DEBUG] START check_boot_completed [2025-08-23 07:16:16][354916443626717][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:16:16][354916443626717][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:16:16][354916443626717][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:16:16][354916443626717][400 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 07:16:16][354916443626717][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 07:16:16][354916443626717][401 ms][DEBUG] START check_internet [2025-08-23 07:16:16][354916443626717][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:16:17][354916443626717][697 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.242/142.242/142.242/0.000 ms\n [2025-08-23 07:16:17][354916443626717][698 ms][DEBUG] check_internet: online [2025-08-23 07:16:17][354916443626717][698 ms][DEBUG] END check_internet in 297 ms [2025-08-23 07:16:17][354916443626717][698 ms][DEBUG] rawBody.length=1149 [2025-08-23 07:16:17][354916443626717][698 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9895\"}'\'' -e'"" [2025-08-23 07:16:17][354916443626717][698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:16:17][354916443626717][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9895\"}'\'' -e'"" [2025-08-23 07:16:23][354916443626717][7258 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9fbeaa2-c7e8-46d7-976c-07005c719175","id":"QR_e9fbeaa2-c7e8-46d7-976c-07005c719175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:16:23][354916443626717][7414 ms][DEBUG] proc_open done in 6716 ms; code=255; res.len=3343 [2025-08-23 07:16:23][354916443626717][7414 ms][DEBUG] END runCmdUntilRes#1 in 6717 ms [2025-08-23 07:16:23][354916443626717][7414 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:16:29][350226694337814][0 ms][INFO] === Request start === [2025-08-23 07:16:29][350226694337814][0 ms][DEBUG] START check_scloud [2025-08-23 07:16:29][350226694337814][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:16:29][350226694337814][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 2376 4970 23842856 158404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:16:29][350226694337814][258 ms][DEBUG] targetPkg: running [2025-08-23 07:16:29][350226694337814][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-23 07:16:29][350226694337814][258 ms][DEBUG] START check_boot_completed [2025-08-23 07:16:29][350226694337814][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:16:29][350226694337814][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:16:29][350226694337814][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:16:29][350226694337814][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:16:29][350226694337814][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:16:29][350226694337814][336 ms][DEBUG] START check_internet [2025-08-23 07:16:29][350226694337814][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.315/239.315/239.315/0.000 ms\n [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] check_internet: online [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] END check_internet in 344 ms [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:16:30][350226694337814][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226694337814\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5901\"}'\'' -e'"" [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:16:30][350226694337814][680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226694337814\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5901\"}'\'' -e'"" [2025-08-23 07:16:34][350226694337814][4850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab91c1fb-4cc3-478e-91ac-ec50b57e7793","id":"QR_ab91c1fb-4cc3-478e-91ac-ec50b57e7793","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:16:34][350226694337814][5006 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-23 07:16:34][350226694337814][5007 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-23 07:16:34][350226694337814][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:17:03][353684144592163][0 ms][INFO] === Request start === [2025-08-23 07:17:03][353684144592163][1 ms][DEBUG] START check_scloud [2025-08-23 07:17:03][353684144592163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:17:03][353684144592163][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 2376 4970 23977192 170476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:17:03][353684144592163][291 ms][DEBUG] targetPkg: running [2025-08-23 07:17:03][353684144592163][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-23 07:17:03][353684144592163][291 ms][DEBUG] START check_boot_completed [2025-08-23 07:17:03][353684144592163][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:17:03][353684144592163][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:17:03][353684144592163][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:17:03][353684144592163][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:17:03][353684144592163][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:17:03][353684144592163][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:17:03][353684144592163][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144592163\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9350\"}'\'' -e'"" [2025-08-23 07:17:03][353684144592163][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:17:03][353684144592163][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144592163\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9350\"}'\'' -e'"" [2025-08-23 07:17:07][353684144592163][4118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a570e145-37e8-4a4f-9834-dde4747bb0ad","id":"QR_a570e145-37e8-4a4f-9834-dde4747bb0ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:17:07][353684144592163][4274 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-23 07:17:07][353684144592163][4274 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 07:17:07][353684144592163][4274 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:18:03][354721981057451][1 ms][INFO] === Request start === [2025-08-23 07:18:03][354721981057451][2 ms][DEBUG] START check_scloud [2025-08-23 07:18:03][354721981057451][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:18:03][354721981057451][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 2376 4970 24106368 181596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:18:03][354721981057451][305 ms][DEBUG] targetPkg: running [2025-08-23 07:18:03][354721981057451][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 07:18:03][354721981057451][305 ms][DEBUG] START check_boot_completed [2025-08-23 07:18:03][354721981057451][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:18:03][354721981057451][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:18:03][354721981057451][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:18:03][354721981057451][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:18:03][354721981057451][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 07:18:03][354721981057451][398 ms][DEBUG] START check_internet [2025-08-23 07:18:03][354721981057451][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.294/194.294/194.294/0.000 ms\n [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] check_internet: online [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] END check_internet in 313 ms [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:18:03][354721981057451][711 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721981057451\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4021\"}'\'' -e'"" [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:18:03][354721981057451][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721981057451\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4021\"}'\'' -e'"" [2025-08-23 07:18:08][354721981057451][4960 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5c9df46-3072-4d9b-8a0d-4fa7a0e4975b","id":"QR_c5c9df46-3072-4d9b-8a0d-4fa7a0e4975b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:18:08][354721981057451][5116 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 07:18:08][354721981057451][5116 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 07:18:08][354721981057451][5116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:20:02][353686117336619][0 ms][INFO] === Request start === [2025-08-23 07:20:02][353686117336619][1 ms][DEBUG] START check_scloud [2025-08-23 07:20:02][353686117336619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:20:03][353686117336619][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 2376 4970 24276672 194140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:20:03][353686117336619][269 ms][DEBUG] targetPkg: running [2025-08-23 07:20:03][353686117336619][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 07:20:03][353686117336619][269 ms][DEBUG] START check_boot_completed [2025-08-23 07:20:03][353686117336619][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:20:03][353686117336619][300 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:20:03][353686117336619][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:20:03][353686117336619][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:20:03][353686117336619][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:20:03][353686117336619][347 ms][DEBUG] START check_internet [2025-08-23 07:20:03][353686117336619][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:20:03][353686117336619][862 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.784/202.784/202.784/0.000 ms\n [2025-08-23 07:20:03][353686117336619][862 ms][DEBUG] check_internet: online [2025-08-23 07:20:03][353686117336619][862 ms][DEBUG] END check_internet in 516 ms [2025-08-23 07:20:03][353686117336619][863 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:20:03][353686117336619][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353686117336619\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-08-23 07:20:03][353686117336619][863 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:20:03][353686117336619][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353686117336619\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-08-23 07:20:07][353686117336619][4877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_823348b8-b034-49e8-a42f-c67c90154009","id":"QR_823348b8-b034-49e8-a42f-c67c90154009","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:20:07][353686117336619][5033 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 07:20:07][353686117336619][5033 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 07:20:07][353686117336619][5033 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:21:03][353744504345006][1 ms][INFO] === Request start === [2025-08-23 07:21:03][353744504345006][2 ms][DEBUG] START check_scloud [2025-08-23 07:21:03][353744504345006][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:21:03][353744504345006][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 2376 4970 24388516 205360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:21:03][353744504345006][317 ms][DEBUG] targetPkg: running [2025-08-23 07:21:03][353744504345006][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 07:21:03][353744504345006][317 ms][DEBUG] START check_boot_completed [2025-08-23 07:21:03][353744504345006][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:21:03][353744504345006][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:21:03][353744504345006][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:21:03][353744504345006][442 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 07:21:03][353744504345006][442 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 07:21:03][353744504345006][442 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:21:03][353744504345006][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504345006\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2679\"}'\'' -e'"" [2025-08-23 07:21:03][353744504345006][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:21:03][353744504345006][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504345006\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2679\"}'\'' -e'"" [2025-08-23 07:21:07][353744504345006][4472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59a86431-ed4c-4966-8b3e-a7018ac06583","id":"QR_59a86431-ed4c-4966-8b3e-a7018ac06583","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:21:07][353744504345006][4628 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 07:21:07][353744504345006][4628 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 07:21:07][353744504345006][4628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:23:03][355326629635822][1 ms][INFO] === Request start === [2025-08-23 07:23:03][355326629635822][2 ms][DEBUG] START check_scloud [2025-08-23 07:23:03][355326629635822][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:23:03][355326629635822][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 2376 4970 24499456 217564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:23:03][355326629635822][251 ms][DEBUG] targetPkg: running [2025-08-23 07:23:03][355326629635822][251 ms][DEBUG] END check_scloud in 249 ms [2025-08-23 07:23:03][355326629635822][251 ms][DEBUG] START check_boot_completed [2025-08-23 07:23:03][355326629635822][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:23:04][355326629635822][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:23:04][355326629635822][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:23:04][355326629635822][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:23:04][355326629635822][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:23:04][355326629635822][360 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:23:04][355326629635822][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629635822\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2489\"}'\'' -e'"" [2025-08-23 07:23:04][355326629635822][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:23:04][355326629635822][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629635822\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2489\"}'\'' -e'"" [2025-08-23 07:23:08][355326629635822][4359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b04c518-d6ca-4425-9d8a-5211b2222ee1","id":"QR_5b04c518-d6ca-4425-9d8a-5211b2222ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:23:08][355326629635822][4515 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 07:23:08][355326629635822][4515 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 07:23:08][355326629635822][4515 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:24:03][351648440579630][1 ms][INFO] === Request start === [2025-08-23 07:24:03][351648440579630][2 ms][DEBUG] START check_scloud [2025-08-23 07:24:03][351648440579630][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:24:03][351648440579630][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 2376 4970 24627556 228428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:24:03][351648440579630][315 ms][DEBUG] targetPkg: running [2025-08-23 07:24:03][351648440579630][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 07:24:03][351648440579630][316 ms][DEBUG] START check_boot_completed [2025-08-23 07:24:03][351648440579630][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:24:03][351648440579630][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:24:03][351648440579630][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:24:03][351648440579630][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:24:03][351648440579630][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 07:24:03][351648440579630][409 ms][DEBUG] START check_internet [2025-08-23 07:24:03][351648440579630][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.083/201.083/201.083/0.000 ms\n [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] check_internet: online [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] END check_internet in 469 ms [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:24:03][351648440579630][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440579630\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9977\"}'\'' -e'"" [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:24:03][351648440579630][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440579630\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9977\"}'\'' -e'"" [2025-08-23 07:24:07][351648440579630][4923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a2daefc-e989-470f-9154-eeb5195b9f4f","id":"QR_5a2daefc-e989-470f-9154-eeb5195b9f4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:24:08][351648440579630][5080 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 07:24:08][351648440579630][5080 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 07:24:08][351648440579630][5080 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:25:03][350858557180632][0 ms][INFO] === Request start === [2025-08-23 07:25:03][350858557180632][1 ms][DEBUG] START check_scloud [2025-08-23 07:25:03][350858557180632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:25:03][350858557180632][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 2376 4970 24768076 240072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:25:03][350858557180632][305 ms][DEBUG] targetPkg: running [2025-08-23 07:25:03][350858557180632][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 07:25:03][350858557180632][305 ms][DEBUG] START check_boot_completed [2025-08-23 07:25:03][350858557180632][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:25:03][350858557180632][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:25:03][350858557180632][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:25:03][350858557180632][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:25:03][350858557180632][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 07:25:03][350858557180632][398 ms][DEBUG] rawBody.length=1147 [2025-08-23 07:25:03][350858557180632][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350858557180632\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-08-23 07:25:03][350858557180632][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:25:03][350858557180632][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350858557180632\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-08-23 07:25:07][350858557180632][4194 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 07:25:07][350858557180632][4194 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-23 07:25:07][350858557180632][4194 ms][WARN] Detected error: Process with pid 2376 either refused to load frida-agent, or terminated during injection [2025-08-23 07:25:07][350858557180632][4194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 07:25:07][350858557180632][4334 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 07:25:07][350858557180632][4334 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 07:25:07][350858557180632][4334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 07:25:07][350858557180632][4506 ms][DEBUG] SU: done in 172 ms; out [2025-08-23 07:25:07][350858557180632][4506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 07:25:07][350858557180632][4662 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 07:25:09][350858557180632][6677 ms][DEBUG] START check_boot_completed [2025-08-23 07:25:09][350858557180632][6677 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:25:10][350858557180632][6724 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:25:10][350858557180632][6724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:25:10][350858557180632][6787 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:25:10][350858557180632][6787 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:25:13][350858557180632][9802 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 07:25:13][350858557180632][9802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350858557180632\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-08-23 07:25:17][350858557180632][13801 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37e95cf8-75a2-4256-9291-ed3f6b0edf61","id":"QR_37e95cf8-75a2-4256-9291-ed3f6b0edf61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:25:17][350858557180632][13957 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 07:25:17][350858557180632][13957 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-08-23 07:25:17][350858557180632][13957 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:27:03][351723300609239][1 ms][INFO] === Request start === [2025-08-23 07:27:03][351723300609239][2 ms][DEBUG] START check_scloud [2025-08-23 07:27:03][351723300609239][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:27:04][351723300609239][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 3980 4970 23524240 125800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:27:04][351723300609239][308 ms][DEBUG] targetPkg: running [2025-08-23 07:27:04][351723300609239][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 07:27:04][351723300609239][308 ms][DEBUG] START check_boot_completed [2025-08-23 07:27:04][351723300609239][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:27:04][351723300609239][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:27:04][351723300609239][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:27:04][351723300609239][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:27:04][351723300609239][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:27:04][351723300609239][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:27:04][351723300609239][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8970\"}'\'' -e'"" [2025-08-23 07:27:04][351723300609239][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:27:04][351723300609239][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8970\"}'\'' -e'"" [2025-08-23 07:27:08][351723300609239][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f064c2e2-2118-4e62-9812-f6bd4cb80d1d","id":"QR_f064c2e2-2118-4e62-9812-f6bd4cb80d1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:27:08][351723300609239][4712 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 07:27:08][351723300609239][4713 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 07:27:08][351723300609239][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:27:10][356019747795938][0 ms][INFO] === Request start === [2025-08-23 07:27:10][356019747795938][1 ms][DEBUG] START check_scloud [2025-08-23 07:27:10][356019747795938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:27:11][356019747795938][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 3980 4970 23651084 136804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:27:11][356019747795938][297 ms][DEBUG] targetPkg: running [2025-08-23 07:27:11][356019747795938][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 07:27:11][356019747795938][298 ms][DEBUG] START check_boot_completed [2025-08-23 07:27:11][356019747795938][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:27:11][356019747795938][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:27:11][356019747795938][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:27:11][356019747795938][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:27:11][356019747795938][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:27:11][356019747795938][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:27:11][356019747795938][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747795938\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8178\"}'\'' -e'"" [2025-08-23 07:27:11][356019747795938][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:27:11][356019747795938][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747795938\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8178\"}'\'' -e'"" [2025-08-23 07:27:15][356019747795938][4046 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbae073b-22a9-49fe-8290-a8ce81d2f8be","id":"QR_fbae073b-22a9-49fe-8290-a8ce81d2f8be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:27:15][356019747795938][4202 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-23 07:27:15][356019747795938][4202 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-23 07:27:15][356019747795938][4203 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:31:03][350013885868108][1 ms][INFO] === Request start === [2025-08-23 07:31:03][350013885868108][2 ms][DEBUG] START check_scloud [2025-08-23 07:31:03][350013885868108][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:31:03][350013885868108][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 3980 4970 23817000 148660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:31:03][350013885868108][299 ms][DEBUG] targetPkg: running [2025-08-23 07:31:03][350013885868108][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 07:31:03][350013885868108][299 ms][DEBUG] START check_boot_completed [2025-08-23 07:31:03][350013885868108][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:31:03][350013885868108][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:31:03][350013885868108][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:31:03][350013885868108][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:31:03][350013885868108][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:31:03][350013885868108][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:31:03][350013885868108][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885868108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4925\"}'\'' -e'"" [2025-08-23 07:31:03][350013885868108][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:31:03][350013885868108][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885868108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4925\"}'\'' -e'"" [2025-08-23 07:31:07][350013885868108][4564 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d36fc3eb-81bd-49ba-a8d7-6b205e381bdc","id":"QR_d36fc3eb-81bd-49ba-a8d7-6b205e381bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:31:07][350013885868108][4720 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 07:31:07][350013885868108][4720 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 07:31:07][350013885868108][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:32:03][352600228029949][1 ms][INFO] === Request start === [2025-08-23 07:32:03][352600228029949][2 ms][DEBUG] START check_scloud [2025-08-23 07:32:03][352600228029949][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:32:03][352600228029949][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 3980 4970 23969612 159652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:32:03][352600228029949][304 ms][DEBUG] targetPkg: running [2025-08-23 07:32:03][352600228029949][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 07:32:03][352600228029949][304 ms][DEBUG] START check_boot_completed [2025-08-23 07:32:03][352600228029949][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:32:03][352600228029949][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:32:03][352600228029949][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:32:03][352600228029949][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:32:03][352600228029949][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:32:03][352600228029949][413 ms][DEBUG] START check_internet [2025-08-23 07:32:03][352600228029949][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.621/200.621/200.621/0.000 ms\n [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] check_internet: online [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] END check_internet in 469 ms [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:32:03][352600228029949][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228029949\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3612\"}'\'' -e'"" [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:32:03][352600228029949][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228029949\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3612\"}'\'' -e'"" [2025-08-23 07:32:07][352600228029949][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d43a3470-d9dc-4e16-9881-3ce53c9b21a0","id":"QR_d43a3470-d9dc-4e16-9881-3ce53c9b21a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:32:08][352600228029949][4943 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-23 07:32:08][352600228029949][4943 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-23 07:32:08][352600228029949][4943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:35:03][350290812690702][1 ms][INFO] === Request start === [2025-08-23 07:35:03][350290812690702][2 ms][DEBUG] START check_scloud [2025-08-23 07:35:03][350290812690702][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:35:04][350290812690702][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 3980 4970 24103860 170768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:35:04][350290812690702][283 ms][DEBUG] targetPkg: running [2025-08-23 07:35:04][350290812690702][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 07:35:04][350290812690702][283 ms][DEBUG] START check_boot_completed [2025-08-23 07:35:04][350290812690702][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:35:04][350290812690702][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:35:04][350290812690702][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:35:04][350290812690702][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 07:35:04][350290812690702][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:35:04][350290812690702][392 ms][DEBUG] rawBody.length=1149 [2025-08-23 07:35:04][350290812690702][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812690702\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1883\"}'\'' -e'"" [2025-08-23 07:35:04][350290812690702][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:35:04][350290812690702][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812690702\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1883\"}'\'' -e'"" [2025-08-23 07:35:11][350290812690702][7171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2bcc1d8-94e0-4e4a-abda-1f3e6dc6505a","id":"QR_b2bcc1d8-94e0-4e4a-abda-1f3e6dc6505a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:35:11][350290812690702][7327 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-08-23 07:35:11][350290812690702][7327 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-23 07:35:11][350290812690702][7328 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:36:04][352058607140763][0 ms][INFO] === Request start === [2025-08-23 07:36:04][352058607140763][1 ms][DEBUG] START check_scloud [2025-08-23 07:36:04][352058607140763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:36:05][352058607140763][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 3980 4970 24262232 182772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:36:05][352058607140763][308 ms][DEBUG] targetPkg: running [2025-08-23 07:36:05][352058607140763][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 07:36:05][352058607140763][308 ms][DEBUG] START check_boot_completed [2025-08-23 07:36:05][352058607140763][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:36:05][352058607140763][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:36:05][352058607140763][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:36:05][352058607140763][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 07:36:05][352058607140763][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 07:36:05][352058607140763][403 ms][DEBUG] START check_internet [2025-08-23 07:36:05][352058607140763][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.609/219.609/219.609/0.000 ms\n [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] check_internet: online [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] END check_internet in 358 ms [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] rawBody.length=1149 [2025-08-23 07:36:05][352058607140763][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058607140763\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1550\"}'\'' -e'"" [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:36:05][352058607140763][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058607140763\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1550\"}'\'' -e'"" [2025-08-23 07:36:11][352058607140763][7149 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99384422-3f1e-4eee-a74d-8c469befb1fd","id":"QR_99384422-3f1e-4eee-a74d-8c469befb1fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:36:12][352058607140763][7306 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-08-23 07:36:12][352058607140763][7306 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-08-23 07:36:12][352058607140763][7306 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:38:02][352221807224809][1 ms][INFO] === Request start === [2025-08-23 07:38:02][352221807224809][2 ms][DEBUG] START check_scloud [2025-08-23 07:38:02][352221807224809][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:38:03][352221807224809][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 3980 4970 24393532 194076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:38:03][352221807224809][295 ms][DEBUG] targetPkg: running [2025-08-23 07:38:03][352221807224809][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 07:38:03][352221807224809][295 ms][DEBUG] START check_boot_completed [2025-08-23 07:38:03][352221807224809][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:38:03][352221807224809][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:38:03][352221807224809][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:38:03][352221807224809][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:38:03][352221807224809][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:38:03][352221807224809][374 ms][DEBUG] START check_internet [2025-08-23 07:38:03][352221807224809][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.468/201.468/201.468/0.000 ms\n [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] check_internet: online [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] END check_internet in 515 ms [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:38:03][352221807224809][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221807224809\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6161\"}'\'' -e'"" [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:38:03][352221807224809][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221807224809\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6161\"}'\'' -e'"" [2025-08-23 07:38:07][352221807224809][4997 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92bd6275-2c4a-4c0a-a118-fe32596b473b","id":"QR_92bd6275-2c4a-4c0a-a118-fe32596b473b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:38:08][352221807224809][5153 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 07:38:08][352221807224809][5153 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 07:38:08][352221807224809][5153 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:38:10][350493707487420][1 ms][INFO] === Request start === [2025-08-23 07:38:10][350493707487420][1 ms][DEBUG] START check_scloud [2025-08-23 07:38:10][350493707487420][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:38:10][350493707487420][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 3980 4970 24544196 205836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:38:10][350493707487420][299 ms][DEBUG] targetPkg: running [2025-08-23 07:38:10][350493707487420][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 07:38:10][350493707487420][299 ms][DEBUG] START check_boot_completed [2025-08-23 07:38:10][350493707487420][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:38:10][350493707487420][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:38:10][350493707487420][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:38:11][350493707487420][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:38:11][350493707487420][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 07:38:11][350493707487420][393 ms][DEBUG] START check_internet [2025-08-23 07:38:11][350493707487420][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:38:11][350493707487420][705 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.708/208.708/208.708/0.000 ms\n [2025-08-23 07:38:11][350493707487420][706 ms][DEBUG] check_internet: online [2025-08-23 07:38:11][350493707487420][706 ms][DEBUG] END check_internet in 313 ms [2025-08-23 07:38:11][350493707487420][706 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:38:11][350493707487420][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350493707487420\",\"model\":\"SM-S921N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5494\"}'\'' -e'"" [2025-08-23 07:38:11][350493707487420][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:38:11][350493707487420][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350493707487420\",\"model\":\"SM-S921N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5494\"}'\'' -e'"" [2025-08-23 07:38:15][350493707487420][4439 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a395f9ba-934f-48e9-9c37-03e24852586f","id":"QR_a395f9ba-934f-48e9-9c37-03e24852586f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:38:15][350493707487420][4595 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-23 07:38:15][350493707487420][4595 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 07:38:15][350493707487420][4595 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:42:03][350226695619681][1 ms][INFO] === Request start === [2025-08-23 07:42:03][350226695619681][2 ms][DEBUG] START check_scloud [2025-08-23 07:42:03][350226695619681][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:42:03][350226695619681][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 3980 4970 24688644 217004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:42:03][350226695619681][318 ms][DEBUG] targetPkg: running [2025-08-23 07:42:03][350226695619681][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 07:42:03][350226695619681][318 ms][DEBUG] START check_boot_completed [2025-08-23 07:42:03][350226695619681][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:42:03][350226695619681][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:42:03][350226695619681][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:42:03][350226695619681][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:42:03][350226695619681][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:42:03][350226695619681][427 ms][DEBUG] START check_internet [2025-08-23 07:42:03][350226695619681][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.062/201.062/201.062/0.000 ms\n [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] check_internet: online [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] END check_internet in 500 ms [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:42:04][350226695619681][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695619681\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1575\"}'\'' -e'"" [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:42:04][350226695619681][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695619681\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1575\"}'\'' -e'"" [2025-08-23 07:42:08][350226695619681][4972 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c28e0e2-35de-47e2-b624-981f41b51cc2","id":"QR_1c28e0e2-35de-47e2-b624-981f41b51cc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:42:08][350226695619681][5129 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 07:42:08][350226695619681][5129 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 07:42:08][350226695619681][5129 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:43:03][354068193267944][0 ms][INFO] === Request start === [2025-08-23 07:43:03][354068193267944][1 ms][DEBUG] START check_scloud [2025-08-23 07:43:03][354068193267944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:43:03][354068193267944][277 ms][DEBUG] SU: done in 275 ms; outu0_a118 3980 4970 24798312 228896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:43:03][354068193267944][277 ms][DEBUG] targetPkg: running [2025-08-23 07:43:03][354068193267944][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 07:43:03][354068193267944][277 ms][DEBUG] START check_boot_completed [2025-08-23 07:43:03][354068193267944][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:43:04][354068193267944][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:43:04][354068193267944][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:43:04][354068193267944][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:43:04][354068193267944][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 07:43:04][354068193267944][370 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:43:04][354068193267944][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193267944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3215\"}'\'' -e'"" [2025-08-23 07:43:04][354068193267944][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:43:04][354068193267944][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193267944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3215\"}'\'' -e'"" [2025-08-23 07:43:07][354068193267944][4244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5028c276-eebe-42ec-8c6e-32ef7e73be2f","id":"QR_5028c276-eebe-42ec-8c6e-32ef7e73be2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:43:08][354068193267944][4400 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 07:43:08][354068193267944][4400 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 07:43:08][354068193267944][4400 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:45:02][351270418104422][1 ms][INFO] === Request start === [2025-08-23 07:45:02][351270418104422][2 ms][DEBUG] START check_scloud [2025-08-23 07:45:02][351270418104422][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:45:03][351270418104422][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 3980 4970 24907980 240008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:45:03][351270418104422][266 ms][DEBUG] targetPkg: running [2025-08-23 07:45:03][351270418104422][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 07:45:03][351270418104422][266 ms][DEBUG] START check_boot_completed [2025-08-23 07:45:03][351270418104422][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:45:03][351270418104422][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:45:03][351270418104422][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:45:03][351270418104422][361 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 07:45:03][351270418104422][361 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 07:45:03][351270418104422][361 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:45:03][351270418104422][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418104422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-08-23 07:45:03][351270418104422][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:45:03][351270418104422][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418104422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-08-23 07:45:06][351270418104422][4047 ms][DEBUG] proc_open done in 3685 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 07:45:06][351270418104422][4047 ms][DEBUG] END runCmdUntilRes#1 in 3685 ms [2025-08-23 07:45:06][351270418104422][4047 ms][WARN] Detected error: Process with pid 3980 either refused to load frida-agent, or terminated during injection [2025-08-23 07:45:06][351270418104422][4047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 07:45:07][351270418104422][4187 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 07:45:07][351270418104422][4187 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 07:45:07][351270418104422][4187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 07:45:07][351270418104422][4327 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 07:45:07][351270418104422][4328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 07:45:07][351270418104422][4468 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 07:45:09][351270418104422][6483 ms][DEBUG] START check_boot_completed [2025-08-23 07:45:09][351270418104422][6483 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:45:09][351270418104422][6530 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:45:09][351270418104422][6530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:45:09][351270418104422][6577 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:45:09][351270418104422][6577 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 07:45:12][351270418104422][9592 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 07:45:12][351270418104422][9592 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418104422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-08-23 07:45:16][351270418104422][13575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a40e8b83-c6cb-41c7-bcd2-308c94335f51","id":"QR_a40e8b83-c6cb-41c7-bcd2-308c94335f51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:45:16][351270418104422][13732 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 07:45:16][351270418104422][13732 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-23 07:45:16][351270418104422][13732 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:49:03][353070870732308][1 ms][INFO] === Request start === [2025-08-23 07:49:03][353070870732308][2 ms][DEBUG] START check_scloud [2025-08-23 07:49:03][353070870732308][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:49:04][353070870732308][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 6787 4970 23509860 126380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:49:04][353070870732308][305 ms][DEBUG] targetPkg: running [2025-08-23 07:49:04][353070870732308][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 07:49:04][353070870732308][305 ms][DEBUG] START check_boot_completed [2025-08-23 07:49:04][353070870732308][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:49:04][353070870732308][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:49:04][353070870732308][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:49:04][353070870732308][401 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 07:49:04][353070870732308][401 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 07:49:04][353070870732308][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:49:04][353070870732308][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353070870732308\",\"model\":\"SM-X916B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-08-23 07:49:04][353070870732308][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:49:04][353070870732308][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353070870732308\",\"model\":\"SM-X916B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-08-23 07:49:08][353070870732308][4366 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fd0c487-a3e0-4359-a1eb-4110556f6a88","id":"QR_2fd0c487-a3e0-4359-a1eb-4110556f6a88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:49:08][353070870732308][4522 ms][DEBUG] proc_open done in 4121 ms; code=255; res.len=3343 [2025-08-23 07:49:08][353070870732308][4522 ms][DEBUG] END runCmdUntilRes#1 in 4121 ms [2025-08-23 07:49:08][353070870732308][4523 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:50:03][356080126815275][0 ms][INFO] === Request start === [2025-08-23 07:50:03][356080126815275][1 ms][DEBUG] START check_scloud [2025-08-23 07:50:03][356080126815275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:50:03][356080126815275][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 6787 4970 23625416 137204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:50:03][356080126815275][307 ms][DEBUG] targetPkg: running [2025-08-23 07:50:03][356080126815275][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 07:50:03][356080126815275][307 ms][DEBUG] START check_boot_completed [2025-08-23 07:50:03][356080126815275][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:50:03][356080126815275][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:50:03][356080126815275][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:50:04][356080126815275][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 07:50:04][356080126815275][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:50:04][356080126815275][416 ms][DEBUG] START check_internet [2025-08-23 07:50:04][356080126815275][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=123 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 123.237/123.237/123.237/0.000 ms\n [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] check_internet: online [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] END check_internet in 328 ms [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:50:04][356080126815275][744 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080126815275\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3719\"}'\'' -e'"" [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:50:04][356080126815275][744 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080126815275\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3719\"}'\'' -e'"" [2025-08-23 07:50:08][356080126815275][4837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d98cbfdd-e0fd-4747-b818-0d0ef89f521a","id":"QR_d98cbfdd-e0fd-4747-b818-0d0ef89f521a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:50:08][356080126815275][4993 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 07:50:08][356080126815275][4993 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 07:50:08][356080126815275][4993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:52:03][350142321819993][1 ms][INFO] === Request start === [2025-08-23 07:52:03][350142321819993][2 ms][DEBUG] START check_scloud [2025-08-23 07:52:03][350142321819993][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:52:03][350142321819993][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 6787 4970 23774316 149224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:52:03][350142321819993][301 ms][DEBUG] targetPkg: running [2025-08-23 07:52:03][350142321819993][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 07:52:03][350142321819993][301 ms][DEBUG] START check_boot_completed [2025-08-23 07:52:03][350142321819993][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:52:03][350142321819993][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:52:03][350142321819993][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:52:03][350142321819993][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 07:52:03][350142321819993][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:52:03][350142321819993][410 ms][DEBUG] START check_internet [2025-08-23 07:52:03][350142321819993][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.769/275.769/275.769/0.000 ms\n [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] check_internet: online [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] END check_internet in 391 ms [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:52:04][350142321819993][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321819993\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4814\"}'\'' -e'"" [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:52:04][350142321819993][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321819993\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4814\"}'\'' -e'"" [2025-08-23 07:52:08][350142321819993][4909 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dad0800-1d4b-423f-8d3c-bfe03692bca4","id":"QR_7dad0800-1d4b-423f-8d3c-bfe03692bca4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:52:08][350142321819993][5065 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 07:52:08][350142321819993][5065 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 07:52:08][350142321819993][5065 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:54:03][358673443898244][1 ms][INFO] === Request start === [2025-08-23 07:54:03][358673443898244][2 ms][DEBUG] START check_scloud [2025-08-23 07:54:03][358673443898244][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:54:03][358673443898244][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 6787 4970 23920848 160848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:54:03][358673443898244][305 ms][DEBUG] targetPkg: running [2025-08-23 07:54:03][358673443898244][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 07:54:03][358673443898244][305 ms][DEBUG] START check_boot_completed [2025-08-23 07:54:03][358673443898244][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:54:03][358673443898244][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:54:03][358673443898244][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:54:03][358673443898244][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:54:03][358673443898244][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:54:03][358673443898244][384 ms][DEBUG] START check_internet [2025-08-23 07:54:03][358673443898244][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.415/202.415/202.415/0.000 ms\n [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] check_internet: online [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] END check_internet in 437 ms [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:54:04][358673443898244][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443898244\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3213\"}'\'' -e'"" [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:54:04][358673443898244][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443898244\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3213\"}'\'' -e'"" [2025-08-23 07:54:08][358673443898244][4898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd370d3a-53ef-489d-99b1-b3a0e94a9c45","id":"QR_bd370d3a-53ef-489d-99b1-b3a0e94a9c45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:54:08][358673443898244][5054 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 07:54:08][358673443898244][5054 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 07:54:08][358673443898244][5055 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:54:11][359944694202728][0 ms][INFO] === Request start === [2025-08-23 07:54:11][359944694202728][1 ms][DEBUG] START check_scloud [2025-08-23 07:54:11][359944694202728][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:54:11][359944694202728][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 6787 4970 24083864 171132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:54:11][359944694202728][292 ms][DEBUG] targetPkg: running [2025-08-23 07:54:11][359944694202728][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 07:54:11][359944694202728][292 ms][DEBUG] START check_boot_completed [2025-08-23 07:54:11][359944694202728][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:54:11][359944694202728][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 07:54:11][359944694202728][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:54:11][359944694202728][401 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 07:54:11][359944694202728][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 07:54:11][359944694202728][401 ms][DEBUG] START check_internet [2025-08-23 07:54:11][359944694202728][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.661/259.661/259.661/0.000 ms\n [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] check_internet: online [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] END check_internet in 374 ms [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:54:11][359944694202728][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944694202728\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:54:11][359944694202728][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944694202728\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-08-23 07:54:15][359944694202728][4806 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2e8b11c-01e2-4423-afaa-64a9aef42d94","id":"QR_e2e8b11c-01e2-4423-afaa-64a9aef42d94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:54:16][359944694202728][4962 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 07:54:16][359944694202728][4962 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 07:54:16][359944694202728][4962 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:58:03][358558823450023][1 ms][INFO] === Request start === [2025-08-23 07:58:03][358558823450023][2 ms][DEBUG] START check_scloud [2025-08-23 07:58:03][358558823450023][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:58:03][358558823450023][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 6787 4970 24184216 183364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:58:03][358558823450023][313 ms][DEBUG] targetPkg: running [2025-08-23 07:58:03][358558823450023][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 07:58:03][358558823450023][313 ms][DEBUG] START check_boot_completed [2025-08-23 07:58:03][358558823450023][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:58:03][358558823450023][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 07:58:03][358558823450023][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:58:03][358558823450023][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 07:58:03][358558823450023][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 07:58:03][358558823450023][391 ms][DEBUG] START check_internet [2025-08-23 07:58:03][358558823450023][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.883/226.883/226.883/0.000 ms\n [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] check_internet: online [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] END check_internet in 328 ms [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:58:04][358558823450023][719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558823450023\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1797\"}'\'' -e'"" [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:58:04][358558823450023][719 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558823450023\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1797\"}'\'' -e'"" [2025-08-23 07:58:08][358558823450023][4827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8298c1be-11c3-4db7-af19-85499078f1d2","id":"QR_8298c1be-11c3-4db7-af19-85499078f1d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:58:08][358558823450023][4983 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 07:58:08][358558823450023][4984 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 07:58:08][358558823450023][4984 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 07:58:11][353079702313062][0 ms][INFO] === Request start === [2025-08-23 07:58:11][353079702313062][1 ms][DEBUG] START check_scloud [2025-08-23 07:58:11][353079702313062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 07:58:11][353079702313062][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 6787 4970 24335008 194252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 07:58:11][353079702313062][301 ms][DEBUG] targetPkg: running [2025-08-23 07:58:11][353079702313062][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 07:58:11][353079702313062][301 ms][DEBUG] START check_boot_completed [2025-08-23 07:58:11][353079702313062][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 07:58:11][353079702313062][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 07:58:11][353079702313062][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 07:58:11][353079702313062][397 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 07:58:11][353079702313062][397 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 07:58:11][353079702313062][397 ms][DEBUG] START check_internet [2025-08-23 07:58:11][353079702313062][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.604/182.604/182.604/0.000 ms\n [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] check_internet: online [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] END check_internet in 295 ms [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] rawBody.length=1148 [2025-08-23 07:58:11][353079702313062][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079702313062\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2071\"}'\'' -e'"" [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 07:58:11][353079702313062][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079702313062\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2071\"}'\'' -e'"" [2025-08-23 07:58:15][353079702313062][4363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7332f68-ace6-44b5-bd9e-f46d16826dcf","id":"QR_a7332f68-ace6-44b5-bd9e-f46d16826dcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 07:58:15][353079702313062][4519 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-23 07:58:15][353079702313062][4519 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-23 07:58:15][353079702313062][4519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:00:03][350013881541147][0 ms][INFO] === Request start === [2025-08-23 08:00:03][350013881541147][1 ms][DEBUG] START check_scloud [2025-08-23 08:00:03][350013881541147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:00:03][350013881541147][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 6787 4970 24466392 206528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:00:03][350013881541147][307 ms][DEBUG] targetPkg: running [2025-08-23 08:00:03][350013881541147][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 08:00:03][350013881541147][307 ms][DEBUG] START check_boot_completed [2025-08-23 08:00:03][350013881541147][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:00:03][350013881541147][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:00:03][350013881541147][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:00:03][350013881541147][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 08:00:03][350013881541147][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 08:00:03][350013881541147][402 ms][DEBUG] START check_internet [2025-08-23 08:00:03][350013881541147][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:00:04][350013881541147][900 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.763/203.763/203.763/0.000 ms\n [2025-08-23 08:00:04][350013881541147][900 ms][DEBUG] check_internet: online [2025-08-23 08:00:04][350013881541147][900 ms][DEBUG] END check_internet in 499 ms [2025-08-23 08:00:04][350013881541147][900 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:00:04][350013881541147][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881541147\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1694\"}'\'' -e'"" [2025-08-23 08:00:04][350013881541147][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:00:04][350013881541147][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881541147\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1694\"}'\'' -e'"" [2025-08-23 08:00:08][350013881541147][4946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd0c173a-9876-4a88-a7f9-3b1d73725610","id":"QR_bd0c173a-9876-4a88-a7f9-3b1d73725610","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:00:08][350013881541147][5102 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 08:00:08][350013881541147][5102 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 08:00:08][350013881541147][5102 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:00:11][351505860766230][1 ms][INFO] === Request start === [2025-08-23 08:00:11][351505860766230][2 ms][DEBUG] START check_scloud [2025-08-23 08:00:11][351505860766230][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:00:11][351505860766230][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 6787 4970 24610136 217120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:00:11][351505860766230][298 ms][DEBUG] targetPkg: running [2025-08-23 08:00:11][351505860766230][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 08:00:11][351505860766230][298 ms][DEBUG] START check_boot_completed [2025-08-23 08:00:11][351505860766230][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:00:11][351505860766230][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:00:11][351505860766230][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:00:11][351505860766230][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:00:11][351505860766230][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:00:11][351505860766230][407 ms][DEBUG] START check_internet [2025-08-23 08:00:11][351505860766230][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.748/248.748/248.748/0.000 ms\n [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] check_internet: online [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] END check_internet in 375 ms [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:00:12][351505860766230][782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505860766230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3467\"}'\'' -e'"" [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:00:12][351505860766230][782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505860766230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3467\"}'\'' -e'"" [2025-08-23 08:00:15][351505860766230][4578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f8856fd-d17f-4f4a-9cb7-f97552e93692","id":"QR_2f8856fd-d17f-4f4a-9cb7-f97552e93692","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:00:15][351505860766230][4734 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-23 08:00:15][351505860766230][4734 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 08:00:15][351505860766230][4734 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:03:03][354690578467037][1 ms][INFO] === Request start === [2025-08-23 08:03:03][354690578467037][2 ms][DEBUG] START check_scloud [2025-08-23 08:03:03][354690578467037][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:03:03][354690578467037][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 6787 4970 24717848 228828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:03:03][354690578467037][261 ms][DEBUG] targetPkg: running [2025-08-23 08:03:03][354690578467037][261 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 08:03:03][354690578467037][261 ms][DEBUG] START check_boot_completed [2025-08-23 08:03:03][354690578467037][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:03:03][354690578467037][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:03:03][354690578467037][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:03:03][354690578467037][401 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 08:03:03][354690578467037][401 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 08:03:03][354690578467037][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:03:03][354690578467037][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578467037\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9676\"}'\'' -e'"" [2025-08-23 08:03:03][354690578467037][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:03:03][354690578467037][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578467037\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9676\"}'\'' -e'"" [2025-08-23 08:03:08][354690578467037][4916 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3020a487-292a-44f3-a20a-d5bd3a7d357d","id":"QR_3020a487-292a-44f3-a20a-d5bd3a7d357d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:03:08][354690578467037][5072 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-23 08:03:08][354690578467037][5072 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-23 08:03:08][354690578467037][5072 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:03:16][358244108755994][0 ms][INFO] === Request start === [2025-08-23 08:03:16][358244108755994][1 ms][DEBUG] START check_scloud [2025-08-23 08:03:16][358244108755994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:03:16][358244108755994][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 6787 4970 24850208 239784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:03:16][358244108755994][302 ms][DEBUG] targetPkg: running [2025-08-23 08:03:16][358244108755994][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 08:03:16][358244108755994][302 ms][DEBUG] START check_boot_completed [2025-08-23 08:03:16][358244108755994][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:03:16][358244108755994][347 ms][DEBUG] ADB: done in 44 ms; out [2025-08-23 08:03:16][358244108755994][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:03:16][358244108755994][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:03:16][358244108755994][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 08:03:16][358244108755994][394 ms][DEBUG] rawBody.length=1159 [2025-08-23 08:03:16][358244108755994][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358244108755994\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9ANC0P41GJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5108\"}'\'' -e'"" [2025-08-23 08:03:16][358244108755994][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:03:16][358244108755994][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358244108755994\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9ANC0P41GJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5108\"}'\'' -e'"" [2025-08-23 08:03:20][358244108755994][3971 ms][DEBUG] proc_open done in 3576 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 08:03:20][358244108755994][3971 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-23 08:03:20][358244108755994][3971 ms][WARN] Detected error: Process with pid 6787 either refused to load frida-agent, or terminated during injection [2025-08-23 08:03:20][358244108755994][3971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 08:03:20][358244108755994][4097 ms][DEBUG] SU: done in 126 ms; out [2025-08-23 08:03:20][358244108755994][4098 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 08:03:20][358244108755994][4098 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 08:03:20][358244108755994][4221 ms][DEBUG] SU: done in 123 ms; out [2025-08-23 08:03:20][358244108755994][4221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 08:03:20][358244108755994][4393 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 08:03:22][358244108755994][6408 ms][DEBUG] START check_boot_completed [2025-08-23 08:03:22][358244108755994][6408 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:03:22][358244108755994][6455 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:03:22][358244108755994][6455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:03:22][358244108755994][6517 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:03:22][358244108755994][6517 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 08:03:25][358244108755994][9532 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 08:03:25][358244108755994][9532 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358244108755994\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9ANC0P41GJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5108\"}'\'' -e'"" [2025-08-23 08:03:31][358244108755994][14999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1d4cd6d-c018-491b-921c-cf1eb0409155","id":"QR_f1d4cd6d-c018-491b-921c-cf1eb0409155","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:03:31][358244108755994][15156 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-08-23 08:03:31][358244108755994][15156 ms][DEBUG] END runCmdUntilRes#2 in 5624 ms [2025-08-23 08:03:31][358244108755994][15156 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:11:03][352469856260337][1 ms][INFO] === Request start === [2025-08-23 08:11:03][352469856260337][2 ms][DEBUG] START check_scloud [2025-08-23 08:11:03][352469856260337][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:11:03][352469856260337][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 8668 4970 23425908 126916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:11:03][352469856260337][314 ms][DEBUG] targetPkg: running [2025-08-23 08:11:03][352469856260337][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 08:11:03][352469856260337][314 ms][DEBUG] START check_boot_completed [2025-08-23 08:11:03][352469856260337][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:11:03][352469856260337][359 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 08:11:03][352469856260337][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:11:03][352469856260337][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:11:03][352469856260337][406 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 08:11:03][352469856260337][406 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:11:03][352469856260337][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856260337\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6270\"}'\'' -e'"" [2025-08-23 08:11:03][352469856260337][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:11:03][352469856260337][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856260337\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6270\"}'\'' -e'"" [2025-08-23 08:11:07][352469856260337][4514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_729bfeda-46c9-4ead-9d90-9f436c30d825","id":"QR_729bfeda-46c9-4ead-9d90-9f436c30d825","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:11:07][352469856260337][4670 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 08:11:07][352469856260337][4670 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 08:11:07][352469856260337][4670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:18:03][350894213209127][1 ms][INFO] === Request start === [2025-08-23 08:18:03][350894213209127][2 ms][DEBUG] START check_scloud [2025-08-23 08:18:03][350894213209127][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:18:04][350894213209127][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 8668 4970 23576344 116112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:18:04][350894213209127][320 ms][DEBUG] targetPkg: running [2025-08-23 08:18:04][350894213209127][320 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 08:18:04][350894213209127][320 ms][DEBUG] START check_boot_completed [2025-08-23 08:18:04][350894213209127][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:18:04][350894213209127][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:18:04][350894213209127][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:18:04][350894213209127][415 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 08:18:04][350894213209127][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 08:18:04][350894213209127][416 ms][DEBUG] START check_internet [2025-08-23 08:18:04][350894213209127][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:18:04][350894213209127][960 ms][DEBUG] SU: done in 545 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.247/200.247/200.247/0.000 ms\n [2025-08-23 08:18:04][350894213209127][960 ms][DEBUG] check_internet: online [2025-08-23 08:18:04][350894213209127][961 ms][DEBUG] END check_internet in 545 ms [2025-08-23 08:18:04][350894213209127][961 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:18:04][350894213209127][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894213209127\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1305\"}'\'' -e'"" [2025-08-23 08:18:04][350894213209127][961 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:18:04][350894213209127][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894213209127\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1305\"}'\'' -e'"" [2025-08-23 08:18:08][350894213209127][4819 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20def35e-7e9f-4fd7-8b04-1a584c8fa7b9","id":"QR_20def35e-7e9f-4fd7-8b04-1a584c8fa7b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:18:08][350894213209127][4975 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-23 08:18:08][350894213209127][4975 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 08:18:08][350894213209127][4975 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:18:11][354130546689032][0 ms][INFO] === Request start === [2025-08-23 08:18:11][354130546689032][1 ms][DEBUG] START check_scloud [2025-08-23 08:18:11][354130546689032][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:18:11][354130546689032][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 8668 4970 23763052 127164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:18:11][354130546689032][306 ms][DEBUG] targetPkg: running [2025-08-23 08:18:11][354130546689032][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 08:18:11][354130546689032][306 ms][DEBUG] START check_boot_completed [2025-08-23 08:18:11][354130546689032][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:18:11][354130546689032][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 08:18:11][354130546689032][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:18:11][354130546689032][385 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 08:18:11][354130546689032][385 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 08:18:11][354130546689032][385 ms][DEBUG] START check_internet [2025-08-23 08:18:11][354130546689032][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.445/223.445/223.445/0.000 ms\n [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] check_internet: online [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] END check_internet in 343 ms [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:18:11][354130546689032][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546689032\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9131\"}'\'' -e'"" [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:18:11][354130546689032][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546689032\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9131\"}'\'' -e'"" [2025-08-23 08:18:15][354130546689032][4289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b95768af-893d-4d61-8930-ae1974169460","id":"QR_b95768af-893d-4d61-8930-ae1974169460","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:18:15][354130546689032][4445 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-08-23 08:18:15][354130546689032][4445 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-23 08:18:15][354130546689032][4446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:19:03][354805111566745][0 ms][INFO] === Request start === [2025-08-23 08:19:03][354805111566745][1 ms][DEBUG] START check_scloud [2025-08-23 08:19:03][354805111566745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:19:03][354805111566745][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 8668 4970 23880748 139668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:19:03][354805111566745][317 ms][DEBUG] targetPkg: running [2025-08-23 08:19:03][354805111566745][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 08:19:03][354805111566745][317 ms][DEBUG] START check_boot_completed [2025-08-23 08:19:03][354805111566745][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:19:03][354805111566745][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:19:03][354805111566745][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:19:03][354805111566745][428 ms][DEBUG] SU: done in 65 ms; out [2025-08-23 08:19:03][354805111566745][428 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-23 08:19:03][354805111566745][428 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:19:03][354805111566745][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111566745\",\"model\":\"SM-G986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6322\"}'\'' -e'"" [2025-08-23 08:19:03][354805111566745][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:19:03][354805111566745][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111566745\",\"model\":\"SM-G986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6322\"}'\'' -e'"" [2025-08-23 08:19:07][354805111566745][4362 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e18876e-2a89-47f0-bce3-adfba0cbc4ee","id":"QR_0e18876e-2a89-47f0-bce3-adfba0cbc4ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:19:07][354805111566745][4519 ms][DEBUG] proc_open done in 4090 ms; code=255; res.len=3343 [2025-08-23 08:19:07][354805111566745][4519 ms][DEBUG] END runCmdUntilRes#1 in 4090 ms [2025-08-23 08:19:07][354805111566745][4519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:21:03][355320540507723][1 ms][INFO] === Request start === [2025-08-23 08:21:03][355320540507723][2 ms][DEBUG] START check_scloud [2025-08-23 08:21:03][355320540507723][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:21:03][355320540507723][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 8668 4970 24031944 150548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:21:03][355320540507723][265 ms][DEBUG] targetPkg: running [2025-08-23 08:21:03][355320540507723][265 ms][DEBUG] END check_scloud in 263 ms [2025-08-23 08:21:03][355320540507723][265 ms][DEBUG] START check_boot_completed [2025-08-23 08:21:03][355320540507723][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:21:03][355320540507723][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:21:03][355320540507723][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:21:03][355320540507723][374 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:21:03][355320540507723][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:21:03][355320540507723][374 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:21:03][355320540507723][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320540507723\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2068\"}'\'' -e'"" [2025-08-23 08:21:03][355320540507723][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:21:03][355320540507723][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320540507723\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2068\"}'\'' -e'"" [2025-08-23 08:21:07][355320540507723][4341 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_952f230f-bd0d-43a0-8674-660cea701edb","id":"QR_952f230f-bd0d-43a0-8674-660cea701edb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:21:07][355320540507723][4498 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-23 08:21:07][355320540507723][4498 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-23 08:21:07][355320540507723][4498 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:28:31][352749389957990][1 ms][INFO] === Request start === [2025-08-23 08:28:31][352749389957990][2 ms][DEBUG] START check_scloud [2025-08-23 08:28:31][352749389957990][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:28:31][352749389957990][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 8668 4970 24120160 161748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:28:31][352749389957990][311 ms][DEBUG] targetPkg: running [2025-08-23 08:28:31][352749389957990][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 08:28:31][352749389957990][311 ms][DEBUG] START check_boot_completed [2025-08-23 08:28:31][352749389957990][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:28:31][352749389957990][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:28:31][352749389957990][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:28:31][352749389957990][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:28:31][352749389957990][419 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 08:28:31][352749389957990][419 ms][DEBUG] START check_internet [2025-08-23 08:28:31][352749389957990][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.956/201.956/201.956/0.000 ms\n [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] check_internet: online [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] END check_internet in 484 ms [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] rawBody.length=1149 [2025-08-23 08:28:32][352749389957990][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389957990\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5796\"}'\'' -e'"" [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:28:32][352749389957990][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389957990\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5796\"}'\'' -e'"" [2025-08-23 08:28:38][352749389957990][6574 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_106d0f1d-59e8-458b-9bf0-31b92ca9ba91","id":"QR_106d0f1d-59e8-458b-9bf0-31b92ca9ba91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:28:38][352749389957990][6730 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-23 08:28:38][352749389957990][6730 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-23 08:28:38][352749389957990][6730 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:29:03][352665180431532][0 ms][INFO] === Request start === [2025-08-23 08:29:03][352665180431532][1 ms][DEBUG] START check_scloud [2025-08-23 08:29:03][352665180431532][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:29:03][352665180431532][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 8668 4970 24267920 173732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:29:03][352665180431532][297 ms][DEBUG] targetPkg: running [2025-08-23 08:29:03][352665180431532][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 08:29:03][352665180431532][297 ms][DEBUG] START check_boot_completed [2025-08-23 08:29:03][352665180431532][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:29:03][352665180431532][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:29:03][352665180431532][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:29:03][352665180431532][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:29:03][352665180431532][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:29:03][352665180431532][406 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:29:03][352665180431532][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180431532\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8433\"}'\'' -e'"" [2025-08-23 08:29:03][352665180431532][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:29:03][352665180431532][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180431532\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8433\"}'\'' -e'"" [2025-08-23 08:29:08][352665180431532][4561 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34544ad3-8787-48fb-b389-9ad0a2e15e0f","id":"QR_34544ad3-8787-48fb-b389-9ad0a2e15e0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:29:08][352665180431532][4718 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 08:29:08][352665180431532][4718 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 08:29:08][352665180431532][4718 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:29:10][357582387062330][0 ms][INFO] === Request start === [2025-08-23 08:29:10][357582387062330][1 ms][DEBUG] START check_scloud [2025-08-23 08:29:10][357582387062330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:29:10][357582387062330][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 8668 4970 24448408 183448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:29:10][357582387062330][258 ms][DEBUG] targetPkg: running [2025-08-23 08:29:10][357582387062330][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 08:29:10][357582387062330][258 ms][DEBUG] START check_boot_completed [2025-08-23 08:29:10][357582387062330][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:29:11][357582387062330][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 08:29:11][357582387062330][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:29:11][357582387062330][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:29:11][357582387062330][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 08:29:11][357582387062330][336 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:29:11][357582387062330][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387062330\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9265\"}'\'' -e'"" [2025-08-23 08:29:11][357582387062330][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:29:11][357582387062330][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387062330\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9265\"}'\'' -e'"" [2025-08-23 08:29:14][357582387062330][4194 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b94c04e2-f489-4cf4-aed3-804f4207eddd","id":"QR_b94c04e2-f489-4cf4-aed3-804f4207eddd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:29:15][357582387062330][4351 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-23 08:29:15][357582387062330][4351 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 08:29:15][357582387062330][4351 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:32:05][352349696875132][1 ms][INFO] === Request start === [2025-08-23 08:32:05][352349696875132][2 ms][DEBUG] START check_scloud [2025-08-23 08:32:05][352349696875132][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:32:05][352349696875132][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 8668 4970 24580568 195308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:32:05][352349696875132][289 ms][DEBUG] targetPkg: running [2025-08-23 08:32:05][352349696875132][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 08:32:05][352349696875132][289 ms][DEBUG] START check_boot_completed [2025-08-23 08:32:05][352349696875132][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:32:05][352349696875132][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:32:05][352349696875132][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:32:05][352349696875132][414 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 08:32:05][352349696875132][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 08:32:05][352349696875132][414 ms][DEBUG] START check_internet [2025-08-23 08:32:05][352349696875132][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.724/198.724/198.724/0.000 ms\n [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] check_internet: online [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] END check_internet in 469 ms [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] rawBody.length=1149 [2025-08-23 08:32:06][352349696875132][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349696875132\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5686\"}'\'' -e'"" [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:32:06][352349696875132][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349696875132\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5686\"}'\'' -e'"" [2025-08-23 08:32:12][352349696875132][6741 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5a3f0fa-02ac-4ff4-8f5f-828a288d52f3","id":"QR_a5a3f0fa-02ac-4ff4-8f5f-828a288d52f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:32:12][352349696875132][6897 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-08-23 08:32:12][352349696875132][6897 ms][DEBUG] END runCmdUntilRes#1 in 6013 ms [2025-08-23 08:32:12][352349696875132][6897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:33:03][350346010094152][0 ms][INFO] === Request start === [2025-08-23 08:33:03][350346010094152][1 ms][DEBUG] START check_scloud [2025-08-23 08:33:03][350346010094152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:33:03][350346010094152][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 8668 4970 24746804 206188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:33:03][350346010094152][322 ms][DEBUG] targetPkg: running [2025-08-23 08:33:03][350346010094152][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 08:33:03][350346010094152][322 ms][DEBUG] START check_boot_completed [2025-08-23 08:33:03][350346010094152][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:33:03][350346010094152][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:33:03][350346010094152][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:33:03][350346010094152][431 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 08:33:03][350346010094152][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:33:03][350346010094152][431 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:33:03][350346010094152][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350346010094152\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ORO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4567\"}'\'' -e'"" [2025-08-23 08:33:03][350346010094152][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:33:03][350346010094152][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350346010094152\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ORO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4567\"}'\'' -e'"" [2025-08-23 08:33:07][350346010094152][4383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a3448fd-efc8-4902-9ac7-94ec902e5177","id":"QR_4a3448fd-efc8-4902-9ac7-94ec902e5177","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:33:08][350346010094152][4539 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 08:33:08][350346010094152][4539 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 08:33:08][350346010094152][4539 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:34:03][356555115440748][0 ms][INFO] === Request start === [2025-08-23 08:34:03][356555115440748][1 ms][DEBUG] START check_scloud [2025-08-23 08:34:03][356555115440748][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:34:03][356555115440748][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 8668 4970 24905756 218392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:34:03][356555115440748][260 ms][DEBUG] targetPkg: running [2025-08-23 08:34:03][356555115440748][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 08:34:03][356555115440748][260 ms][DEBUG] START check_boot_completed [2025-08-23 08:34:03][356555115440748][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:34:03][356555115440748][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 08:34:03][356555115440748][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:34:03][356555115440748][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:34:03][356555115440748][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 08:34:03][356555115440748][339 ms][DEBUG] START check_internet [2025-08-23 08:34:03][356555115440748][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:34:04][356555115440748][838 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.531/200.531/200.531/0.000 ms\n [2025-08-23 08:34:04][356555115440748][838 ms][DEBUG] check_internet: online [2025-08-23 08:34:04][356555115440748][838 ms][DEBUG] END check_internet in 500 ms [2025-08-23 08:34:04][356555115440748][838 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:34:04][356555115440748][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356555115440748\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2949\"}'\'' -e'"" [2025-08-23 08:34:04][356555115440748][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:34:04][356555115440748][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356555115440748\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2949\"}'\'' -e'"" [2025-08-23 08:34:08][356555115440748][4697 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 08:34:08][356555115440748][4697 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 08:34:08][356555115440748][4697 ms][WARN] Detected error: Process with pid 8668 either refused to load frida-agent, or terminated during injection [2025-08-23 08:34:08][356555115440748][4697 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 08:34:08][356555115440748][4839 ms][DEBUG] SU: done in 142 ms; out [2025-08-23 08:34:08][356555115440748][4839 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 08:34:08][356555115440748][4839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 08:34:08][356555115440748][4962 ms][DEBUG] SU: done in 123 ms; out [2025-08-23 08:34:08][356555115440748][4962 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 08:34:08][356555115440748][5136 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 08:34:10][356555115440748][7149 ms][DEBUG] START check_boot_completed [2025-08-23 08:34:10][356555115440748][7149 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:34:10][356555115440748][7196 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:34:10][356555115440748][7196 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:34:10][356555115440748][7244 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 08:34:10][356555115440748][7244 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 08:34:13][356555115440748][10258 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 08:34:13][356555115440748][10258 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356555115440748\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2949\"}'\'' -e'"" [2025-08-23 08:34:17][356555115440748][14475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c35d07f2-89b9-46e2-8f32-302289065ee1","id":"QR_c35d07f2-89b9-46e2-8f32-302289065ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:34:18][356555115440748][14632 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 08:34:18][356555115440748][14632 ms][DEBUG] END runCmdUntilRes#2 in 4374 ms [2025-08-23 08:34:18][356555115440748][14632 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:35:02][352674520019627][1 ms][INFO] === Request start === [2025-08-23 08:35:02][352674520019627][2 ms][DEBUG] START check_scloud [2025-08-23 08:35:02][352674520019627][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:35:03][352674520019627][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 11692 4970 23541744 126924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:35:03][352674520019627][256 ms][DEBUG] targetPkg: running [2025-08-23 08:35:03][352674520019627][256 ms][DEBUG] END check_scloud in 254 ms [2025-08-23 08:35:03][352674520019627][256 ms][DEBUG] START check_boot_completed [2025-08-23 08:35:03][352674520019627][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:35:03][352674520019627][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:35:03][352674520019627][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:35:03][352674520019627][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:35:03][352674520019627][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 08:35:03][352674520019627][350 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:35:03][352674520019627][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520019627\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-23 08:35:03][352674520019627][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:35:03][352674520019627][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520019627\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-23 08:35:07][352674520019627][4302 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a41f544-2c81-4630-92fd-bf490de00f31","id":"QR_9a41f544-2c81-4630-92fd-bf490de00f31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:35:07][352674520019627][4458 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 08:35:07][352674520019627][4458 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 08:35:07][352674520019627][4458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:35:10][352288969693493][0 ms][INFO] === Request start === [2025-08-23 08:35:10][352288969693493][1 ms][DEBUG] START check_scloud [2025-08-23 08:35:10][352288969693493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:35:10][352288969693493][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 11692 4970 23728340 137012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:35:10][352288969693493][260 ms][DEBUG] targetPkg: running [2025-08-23 08:35:10][352288969693493][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 08:35:10][352288969693493][260 ms][DEBUG] START check_boot_completed [2025-08-23 08:35:10][352288969693493][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:35:10][352288969693493][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:35:10][352288969693493][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:35:10][352288969693493][354 ms][DEBUG] SU: done in 46 ms; out [2025-08-23 08:35:10][352288969693493][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 08:35:10][352288969693493][354 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:35:10][352288969693493][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969693493\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3277\"}'\'' -e'"" [2025-08-23 08:35:10][352288969693493][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:35:10][352288969693493][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969693493\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3277\"}'\'' -e'"" [2025-08-23 08:35:14][352288969693493][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1abf1d4-86ef-457a-b46e-d1a75587fc47","id":"QR_a1abf1d4-86ef-457a-b46e-d1a75587fc47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:35:14][352288969693493][4290 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=3343 [2025-08-23 08:35:14][352288969693493][4290 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-23 08:35:14][352288969693493][4291 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:38:03][354898530625184][1 ms][INFO] === Request start === [2025-08-23 08:38:03][354898530625184][2 ms][DEBUG] START check_scloud [2025-08-23 08:38:03][354898530625184][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:38:03][354898530625184][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 11692 4970 23856264 148684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:38:03][354898530625184][273 ms][DEBUG] targetPkg: running [2025-08-23 08:38:03][354898530625184][273 ms][DEBUG] END check_scloud in 271 ms [2025-08-23 08:38:03][354898530625184][273 ms][DEBUG] START check_boot_completed [2025-08-23 08:38:03][354898530625184][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:38:03][354898530625184][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 08:38:03][354898530625184][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:38:03][354898530625184][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:38:03][354898530625184][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 08:38:03][354898530625184][351 ms][DEBUG] START check_internet [2025-08-23 08:38:03][354898530625184][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:38:03][354898530625184][882 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.788/199.788/199.788/0.000 ms\n [2025-08-23 08:38:03][354898530625184][882 ms][DEBUG] check_internet: online [2025-08-23 08:38:03][354898530625184][882 ms][DEBUG] END check_internet in 531 ms [2025-08-23 08:38:03][354898530625184][882 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:38:03][354898530625184][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898530625184\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3847\"}'\'' -e'"" [2025-08-23 08:38:03][354898530625184][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:38:03][354898530625184][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898530625184\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3847\"}'\'' -e'"" [2025-08-23 08:38:08][354898530625184][5053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf4d7f79-1089-42b9-933e-eb582dade79d","id":"QR_cf4d7f79-1089-42b9-933e-eb582dade79d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:38:08][354898530625184][5209 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-23 08:38:08][354898530625184][5209 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-23 08:38:08][354898530625184][5209 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:38:10][357967972342058][0 ms][INFO] === Request start === [2025-08-23 08:38:10][357967972342058][1 ms][DEBUG] START check_scloud [2025-08-23 08:38:10][357967972342058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:38:11][357967972342058][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 11692 4970 24004880 159712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:38:11][357967972342058][275 ms][DEBUG] targetPkg: running [2025-08-23 08:38:11][357967972342058][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-23 08:38:11][357967972342058][275 ms][DEBUG] START check_boot_completed [2025-08-23 08:38:11][357967972342058][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:38:11][357967972342058][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:38:11][357967972342058][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:38:11][357967972342058][384 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:38:11][357967972342058][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:38:11][357967972342058][384 ms][DEBUG] START check_internet [2025-08-23 08:38:11][357967972342058][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.389/220.389/220.389/0.000 ms\n [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] check_internet: online [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] END check_internet in 328 ms [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:38:11][357967972342058][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972342058\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:38:11][357967972342058][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972342058\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-08-23 08:38:15][357967972342058][4414 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20da556e-5d12-404d-8d60-5f4f6a55b5b0","id":"QR_20da556e-5d12-404d-8d60-5f4f6a55b5b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:38:15][357967972342058][4570 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 08:38:15][357967972342058][4570 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-08-23 08:38:15][357967972342058][4571 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:39:03][351786691851322][0 ms][INFO] === Request start === [2025-08-23 08:39:03][351786691851322][0 ms][DEBUG] START check_scloud [2025-08-23 08:39:03][351786691851322][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:39:03][351786691851322][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11692 4970 24094160 172008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:39:03][351786691851322][301 ms][DEBUG] targetPkg: running [2025-08-23 08:39:03][351786691851322][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 08:39:03][351786691851322][301 ms][DEBUG] START check_boot_completed [2025-08-23 08:39:03][351786691851322][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:39:03][351786691851322][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 08:39:03][351786691851322][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:39:03][351786691851322][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:39:03][351786691851322][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 08:39:03][351786691851322][379 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:39:03][351786691851322][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691851322\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-08-23 08:39:03][351786691851322][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:39:03][351786691851322][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691851322\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-08-23 08:39:07][351786691851322][4315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b77ea5eb-b736-4bd6-8125-ac00c86ac19a","id":"QR_b77ea5eb-b736-4bd6-8125-ac00c86ac19a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:39:07][351786691851322][4471 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-23 08:39:07][351786691851322][4471 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-23 08:39:07][351786691851322][4471 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:41:02][358141435598941][1 ms][INFO] === Request start === [2025-08-23 08:41:02][358141435598941][2 ms][DEBUG] START check_scloud [2025-08-23 08:41:02][358141435598941][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:41:03][358141435598941][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 11692 4970 24214068 184176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:41:03][358141435598941][306 ms][DEBUG] targetPkg: running [2025-08-23 08:41:03][358141435598941][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 08:41:03][358141435598941][306 ms][DEBUG] START check_boot_completed [2025-08-23 08:41:03][358141435598941][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:41:03][358141435598941][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:41:03][358141435598941][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:41:03][358141435598941][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:41:03][358141435598941][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:41:03][358141435598941][415 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:41:03][358141435598941][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435598941\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9736\"}'\'' -e'"" [2025-08-23 08:41:03][358141435598941][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:41:03][358141435598941][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435598941\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9736\"}'\'' -e'"" [2025-08-23 08:41:07][358141435598941][4680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_715981fe-f61e-45e0-9209-e3e65c886a17","id":"QR_715981fe-f61e-45e0-9209-e3e65c886a17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:41:07][358141435598941][4836 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 08:41:07][358141435598941][4836 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 08:41:07][358141435598941][4836 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:42:02][350026556516897][0 ms][INFO] === Request start === [2025-08-23 08:42:02][350026556516897][1 ms][DEBUG] START check_scloud [2025-08-23 08:42:02][350026556516897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:42:03][350026556516897][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 11692 4970 24338200 196136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:42:03][350026556516897][295 ms][DEBUG] targetPkg: running [2025-08-23 08:42:03][350026556516897][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 08:42:03][350026556516897][295 ms][DEBUG] START check_boot_completed [2025-08-23 08:42:03][350026556516897][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:42:03][350026556516897][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:42:03][350026556516897][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:42:03][350026556516897][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:42:03][350026556516897][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 08:42:03][350026556516897][389 ms][DEBUG] START check_internet [2025-08-23 08:42:03][350026556516897][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:42:03][350026556516897][935 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.926/254.926/254.926/0.000 ms\n [2025-08-23 08:42:03][350026556516897][935 ms][DEBUG] check_internet: online [2025-08-23 08:42:03][350026556516897][935 ms][DEBUG] END check_internet in 546 ms [2025-08-23 08:42:03][350026556516897][936 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:42:03][350026556516897][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026556516897\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3169\"}'\'' -e'"" [2025-08-23 08:42:03][350026556516897][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:42:03][350026556516897][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026556516897\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3169\"}'\'' -e'"" [2025-08-23 08:42:08][350026556516897][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d57bdd57-2175-42f1-9f9e-d45e2affbaa4","id":"QR_d57bdd57-2175-42f1-9f9e-d45e2affbaa4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:42:08][350026556516897][5231 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 08:42:08][350026556516897][5231 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 08:42:08][350026556516897][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:42:10][358780101010820][1 ms][INFO] === Request start === [2025-08-23 08:42:10][358780101010820][1 ms][DEBUG] START check_scloud [2025-08-23 08:42:10][358780101010820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:42:10][358780101010820][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11692 4970 24460320 208108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:42:10][358780101010820][305 ms][DEBUG] targetPkg: running [2025-08-23 08:42:10][358780101010820][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 08:42:10][358780101010820][306 ms][DEBUG] START check_boot_completed [2025-08-23 08:42:10][358780101010820][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:42:10][358780101010820][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:42:10][358780101010820][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:42:11][358780101010820][401 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 08:42:11][358780101010820][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 08:42:11][358780101010820][401 ms][DEBUG] START check_internet [2025-08-23 08:42:11][358780101010820][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] SU: done in 263 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.934/149.934/149.934/0.000 ms\n [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] check_internet: online [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] END check_internet in 264 ms [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:42:11][358780101010820][665 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780101010820\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:42:11][358780101010820][665 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780101010820\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-08-23 08:42:15][358780101010820][4664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_545d439b-ebb7-4303-b2d4-ea94351cf386","id":"QR_545d439b-ebb7-4303-b2d4-ea94351cf386","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:42:15][358780101010820][4820 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 08:42:15][358780101010820][4820 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 08:42:15][358780101010820][4820 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:44:03][352404915685877][1 ms][INFO] === Request start === [2025-08-23 08:44:03][352404915685877][2 ms][DEBUG] START check_scloud [2025-08-23 08:44:03][352404915685877][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:44:03][352404915685877][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11692 4970 24567904 220028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:44:03][352404915685877][299 ms][DEBUG] targetPkg: running [2025-08-23 08:44:03][352404915685877][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 08:44:03][352404915685877][299 ms][DEBUG] START check_boot_completed [2025-08-23 08:44:03][352404915685877][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:44:04][352404915685877][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:44:04][352404915685877][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:44:04][352404915685877][423 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 08:44:04][352404915685877][423 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-23 08:44:04][352404915685877][423 ms][DEBUG] START check_internet [2025-08-23 08:44:04][352404915685877][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:44:04][352404915685877][891 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.536/132.536/132.536/0.000 ms\n [2025-08-23 08:44:04][352404915685877][891 ms][DEBUG] check_internet: online [2025-08-23 08:44:04][352404915685877][891 ms][DEBUG] END check_internet in 469 ms [2025-08-23 08:44:04][352404915685877][891 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:44:04][352404915685877][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404915685877\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8404\"}'\'' -e'"" [2025-08-23 08:44:04][352404915685877][892 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:44:04][352404915685877][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404915685877\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8404\"}'\'' -e'"" [2025-08-23 08:44:08][352404915685877][5187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1eafb8e-9296-44e6-89ff-fe10f4f52f9c","id":"QR_f1eafb8e-9296-44e6-89ff-fe10f4f52f9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:44:09][352404915685877][5343 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-23 08:44:09][352404915685877][5343 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-23 08:44:09][352404915685877][5343 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:47:03][350944132677274][1 ms][INFO] === Request start === [2025-08-23 08:47:03][350944132677274][2 ms][DEBUG] START check_scloud [2025-08-23 08:47:03][350944132677274][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:47:03][350944132677274][345 ms][DEBUG] SU: done in 344 ms; outu0_a118 11692 4970 24726600 227668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:47:03][350944132677274][345 ms][DEBUG] targetPkg: running [2025-08-23 08:47:03][350944132677274][345 ms][DEBUG] END check_scloud in 344 ms [2025-08-23 08:47:03][350944132677274][346 ms][DEBUG] START check_boot_completed [2025-08-23 08:47:03][350944132677274][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:47:03][350944132677274][392 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:47:03][350944132677274][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:47:03][350944132677274][455 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:47:03][350944132677274][455 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:47:03][350944132677274][455 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:47:03][350944132677274][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350944132677274\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9132\"}'\'' -e'"" [2025-08-23 08:47:03][350944132677274][455 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:47:03][350944132677274][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350944132677274\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9132\"}'\'' -e'"" [2025-08-23 08:47:07][350944132677274][4703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61088f02-6902-4a93-8918-742d6822980c","id":"QR_61088f02-6902-4a93-8918-742d6822980c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:47:08][350944132677274][4860 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 08:47:08][350944132677274][4860 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 08:47:08][350944132677274][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:47:09][352397453460390][0 ms][INFO] === Request start === [2025-08-23 08:47:09][352397453460390][0 ms][DEBUG] START check_scloud [2025-08-23 08:47:09][352397453460390][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:47:09][352397453460390][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11692 4970 24899792 224812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:47:09][352397453460390][310 ms][DEBUG] targetPkg: running [2025-08-23 08:47:09][352397453460390][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 08:47:09][352397453460390][310 ms][DEBUG] START check_boot_completed [2025-08-23 08:47:09][352397453460390][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:47:09][352397453460390][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:47:09][352397453460390][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:47:10][352397453460390][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 08:47:10][352397453460390][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 08:47:10][352397453460390][419 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:47:10][352397453460390][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453460390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1422\"}'\'' -e'"" [2025-08-23 08:47:10][352397453460390][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:47:10][352397453460390][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453460390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1422\"}'\'' -e'"" [2025-08-23 08:47:14][352397453460390][4527 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 08:47:14][352397453460390][4527 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 08:47:14][352397453460390][4527 ms][WARN] Detected error: Process with pid 11692 either refused to load frida-agent, or terminated during injection [2025-08-23 08:47:14][352397453460390][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 08:47:14][352397453460390][4654 ms][DEBUG] SU: done in 127 ms; out [2025-08-23 08:47:14][352397453460390][4654 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 08:47:14][352397453460390][4654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 08:47:14][352397453460390][4777 ms][DEBUG] SU: done in 123 ms; out [2025-08-23 08:47:14][352397453460390][4777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 08:47:14][352397453460390][4965 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 08:47:16][352397453460390][6980 ms][DEBUG] START check_boot_completed [2025-08-23 08:47:16][352397453460390][6980 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:47:16][352397453460390][7027 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 08:47:16][352397453460390][7027 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:47:16][352397453460390][7074 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:47:16][352397453460390][7074 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 08:47:19][352397453460390][10088 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 08:47:19][352397453460390][10089 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453460390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1422\"}'\'' -e'"" [2025-08-23 08:47:23][352397453460390][13681 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f13e155c-2f9d-4f98-ba59-f505f6744975","id":"QR_f13e155c-2f9d-4f98-ba59-f505f6744975","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:47:23][352397453460390][13838 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-08-23 08:47:23][352397453460390][13838 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-08-23 08:47:23][352397453460390][13838 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 08:52:03][351240644058023][1 ms][INFO] === Request start === [2025-08-23 08:52:03][351240644058023][2 ms][DEBUG] START check_scloud [2025-08-23 08:52:03][351240644058023][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 08:52:03][351240644058023][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 13554 4970 23483268 126936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 08:52:03][351240644058023][326 ms][DEBUG] targetPkg: running [2025-08-23 08:52:03][351240644058023][326 ms][DEBUG] END check_scloud in 324 ms [2025-08-23 08:52:03][351240644058023][326 ms][DEBUG] START check_boot_completed [2025-08-23 08:52:03][351240644058023][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 08:52:04][351240644058023][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 08:52:04][351240644058023][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 08:52:04][351240644058023][419 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 08:52:04][351240644058023][419 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 08:52:04][351240644058023][420 ms][DEBUG] START check_internet [2025-08-23 08:52:04][351240644058023][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 08:52:04][351240644058023][920 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.630/202.630/202.630/0.000 ms\n [2025-08-23 08:52:04][351240644058023][920 ms][DEBUG] check_internet: online [2025-08-23 08:52:04][351240644058023][920 ms][DEBUG] END check_internet in 501 ms [2025-08-23 08:52:04][351240644058023][920 ms][DEBUG] rawBody.length=1148 [2025-08-23 08:52:04][351240644058023][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644058023\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1894\"}'\'' -e'"" [2025-08-23 08:52:04][351240644058023][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 08:52:04][351240644058023][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644058023\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1894\"}'\'' -e'"" [2025-08-23 08:52:08][351240644058023][4965 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14420789-6912-4d6b-8be0-3251313046c1","id":"QR_14420789-6912-4d6b-8be0-3251313046c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 08:52:08][351240644058023][5121 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 08:52:08][351240644058023][5121 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-23 08:52:08][351240644058023][5121 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:03:03][351826111534650][1 ms][INFO] === Request start === [2025-08-23 09:03:03][351826111534650][2 ms][DEBUG] START check_scloud [2025-08-23 09:03:03][351826111534650][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:03:03][351826111534650][247 ms][DEBUG] SU: done in 245 ms; outu0_a118 13554 4970 23634872 138768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:03:03][351826111534650][247 ms][DEBUG] targetPkg: running [2025-08-23 09:03:03][351826111534650][247 ms][DEBUG] END check_scloud in 245 ms [2025-08-23 09:03:03][351826111534650][247 ms][DEBUG] START check_boot_completed [2025-08-23 09:03:03][351826111534650][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:03:03][351826111534650][278 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:03:03][351826111534650][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:03:03][351826111534650][325 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:03:03][351826111534650][325 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 09:03:03][351826111534650][325 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:03:03][351826111534650][325 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826111534650\",\"model\":\"SM-G981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3612\"}'\'' -e'"" [2025-08-23 09:03:03][351826111534650][325 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:03:03][351826111534650][325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826111534650\",\"model\":\"SM-G981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3612\"}'\'' -e'"" [2025-08-23 09:03:07][351826111534650][4605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6138775e-df75-4d65-ae5d-57adbf571ced","id":"QR_6138775e-df75-4d65-ae5d-57adbf571ced","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:03:07][351826111534650][4761 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 09:03:07][351826111534650][4761 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 09:03:07][351826111534650][4761 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:03:12][356544761797502][0 ms][INFO] === Request start === [2025-08-23 09:03:12][356544761797502][1 ms][DEBUG] START check_scloud [2025-08-23 09:03:12][356544761797502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:03:12][356544761797502][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 13554 4970 23833740 149220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:03:12][356544761797502][325 ms][DEBUG] targetPkg: running [2025-08-23 09:03:12][356544761797502][325 ms][DEBUG] END check_scloud in 325 ms [2025-08-23 09:03:12][356544761797502][326 ms][DEBUG] START check_boot_completed [2025-08-23 09:03:12][356544761797502][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:03:12][356544761797502][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:03:12][356544761797502][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:03:12][356544761797502][450 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 09:03:12][356544761797502][450 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 09:03:12][356544761797502][450 ms][DEBUG] rawBody.length=1149 [2025-08-23 09:03:12][356544761797502][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761797502\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-23 09:03:12][356544761797502][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:03:12][356544761797502][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761797502\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-23 09:03:18][356544761797502][5933 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_515e44bc-e6d8-4c21-b136-a79c91b07c96","id":"QR_515e44bc-e6d8-4c21-b136-a79c91b07c96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:03:18][356544761797502][6089 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-08-23 09:03:18][356544761797502][6089 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-23 09:03:18][356544761797502][6090 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:06:03][355902954763171][1 ms][INFO] === Request start === [2025-08-23 09:06:03][355902954763171][2 ms][DEBUG] START check_scloud [2025-08-23 09:06:03][355902954763171][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:06:04][355902954763171][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 13554 4970 23955728 161568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:06:04][355902954763171][305 ms][DEBUG] targetPkg: running [2025-08-23 09:06:04][355902954763171][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 09:06:04][355902954763171][305 ms][DEBUG] START check_boot_completed [2025-08-23 09:06:04][355902954763171][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:06:04][355902954763171][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:06:04][355902954763171][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:06:04][355902954763171][400 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 09:06:04][355902954763171][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 09:06:04][355902954763171][400 ms][DEBUG] START check_internet [2025-08-23 09:06:04][355902954763171][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] SU: done in 592 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.865/202.865/202.865/0.000 ms\n [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] check_internet: online [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] END check_internet in 592 ms [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:06:04][355902954763171][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902954763171\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:06:04][355902954763171][992 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902954763171\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-08-23 09:06:09][355902954763171][5147 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21aad7e8-32d9-46e0-a191-30e1e67868bb","id":"QR_21aad7e8-32d9-46e0-a191-30e1e67868bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:06:09][355902954763171][5303 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 09:06:09][355902954763171][5303 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 09:06:09][355902954763171][5303 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:08:02][358558822646415][0 ms][INFO] === Request start === [2025-08-23 09:08:02][358558822646415][1 ms][DEBUG] START check_scloud [2025-08-23 09:08:02][358558822646415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:08:03][358558822646415][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 13554 4970 24144328 161380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:08:03][358558822646415][315 ms][DEBUG] targetPkg: running [2025-08-23 09:08:03][358558822646415][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 09:08:03][358558822646415][315 ms][DEBUG] START check_boot_completed [2025-08-23 09:08:03][358558822646415][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:08:03][358558822646415][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:08:03][358558822646415][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:08:03][358558822646415][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:08:03][358558822646415][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:08:03][358558822646415][408 ms][DEBUG] START check_internet [2025-08-23 09:08:03][358558822646415][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:08:03][358558822646415][768 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.900/248.900/248.900/0.000 ms\n [2025-08-23 09:08:03][358558822646415][768 ms][DEBUG] check_internet: online [2025-08-23 09:08:03][358558822646415][768 ms][DEBUG] END check_internet in 360 ms [2025-08-23 09:08:03][358558822646415][769 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:08:03][358558822646415][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558822646415\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9642\"}'\'' -e'"" [2025-08-23 09:08:03][358558822646415][769 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:08:03][358558822646415][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558822646415\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9642\"}'\'' -e'"" [2025-08-23 09:08:07][358558822646415][4767 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12174085-824f-443b-bd20-92f0f099a317","id":"QR_12174085-824f-443b-bd20-92f0f099a317","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:08:07][358558822646415][4923 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-23 09:08:07][358558822646415][4923 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-23 09:08:07][358558822646415][4923 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:10:03][351505630644030][1 ms][INFO] === Request start === [2025-08-23 09:10:03][351505630644030][2 ms][DEBUG] START check_scloud [2025-08-23 09:10:03][351505630644030][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:10:04][351505630644030][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 13554 4970 24284652 169136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:10:04][351505630644030][314 ms][DEBUG] targetPkg: running [2025-08-23 09:10:04][351505630644030][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 09:10:04][351505630644030][315 ms][DEBUG] START check_boot_completed [2025-08-23 09:10:04][351505630644030][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:10:04][351505630644030][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:10:04][351505630644030][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:10:04][351505630644030][424 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 09:10:04][351505630644030][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:10:04][351505630644030][424 ms][DEBUG] START check_internet [2025-08-23 09:10:04][351505630644030][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.448/202.448/202.448/0.000 ms\n [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] check_internet: online [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] END check_internet in 437 ms [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:10:04][351505630644030][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505630644030\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9421\"}'\'' -e'"" [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:10:04][351505630644030][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505630644030\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9421\"}'\'' -e'"" [2025-08-23 09:10:08][351505630644030][4875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d409f2cb-bce7-4c49-ad3b-aaa8e60fef11","id":"QR_d409f2cb-bce7-4c49-ad3b-aaa8e60fef11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:10:08][351505630644030][5032 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 09:10:08][351505630644030][5032 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-23 09:10:08][351505630644030][5032 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:11:03][350675291068505][0 ms][INFO] === Request start === [2025-08-23 09:11:03][350675291068505][1 ms][DEBUG] START check_scloud [2025-08-23 09:11:03][350675291068505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:11:03][350675291068505][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 13554 4970 24435408 174140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:11:03][350675291068505][316 ms][DEBUG] targetPkg: running [2025-08-23 09:11:03][350675291068505][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 09:11:03][350675291068505][316 ms][DEBUG] START check_boot_completed [2025-08-23 09:11:03][350675291068505][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:11:03][350675291068505][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:11:03][350675291068505][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:11:03][350675291068505][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:11:03][350675291068505][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:11:03][350675291068505][409 ms][DEBUG] rawBody.length=1147 [2025-08-23 09:11:03][350675291068505][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5052\"}'\'' -e'"" [2025-08-23 09:11:03][350675291068505][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:11:03][350675291068505][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5052\"}'\'' -e'"" [2025-08-23 09:11:07][350675291068505][3940 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 09:11:07][350675291068505][4096 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=115 [2025-08-23 09:11:07][350675291068505][4096 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-23 09:11:07][350675291068505][4096 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 09:11:07][][0 ms][INFO] === Request start === [2025-08-23 09:11:07][][1 ms][DEBUG] START check_scloud [2025-08-23 09:11:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:11:08][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 13554 4970 24612696 184236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:11:08][][318 ms][DEBUG] targetPkg: running [2025-08-23 09:11:08][][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 09:11:08][][319 ms][DEBUG] START check_boot_completed [2025-08-23 09:11:08][][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:11:08][][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:11:08][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:11:08][][414 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 09:11:08][][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 09:11:08][][414 ms][DEBUG] rawBody.length=1128 [2025-08-23 09:11:08][][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1769\"}'\'' -e'"" [2025-08-23 09:11:08][][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:11:08][][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1769\"}'\'' -e'"" [2025-08-23 09:11:11][][4130 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 09:11:11][][4286 ms][DEBUG] proc_open done in 3872 ms; code=255; res.len=115 [2025-08-23 09:11:11][][4286 ms][DEBUG] END runCmdUntilRes#1 in 3872 ms [2025-08-23 09:11:11][][4286 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 09:11:14][350675291068505][0 ms][INFO] === Request start === [2025-08-23 09:11:14][350675291068505][1 ms][DEBUG] START check_scloud [2025-08-23 09:11:14][350675291068505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:11:14][350675291068505][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 13554 4970 24736352 195124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:11:14][350675291068505][313 ms][DEBUG] targetPkg: running [2025-08-23 09:11:14][350675291068505][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 09:11:14][350675291068505][313 ms][DEBUG] START check_boot_completed [2025-08-23 09:11:14][350675291068505][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:11:14][350675291068505][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:11:14][350675291068505][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:11:14][350675291068505][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:11:14][350675291068505][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:11:14][350675291068505][422 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:11:14][350675291068505][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-23 09:11:14][350675291068505][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:11:14][350675291068505][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-23 09:11:21][350675291068505][6671 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4319ad2-5bd8-4b4e-84d0-ab9f127847d2","id":"QR_e4319ad2-5bd8-4b4e-84d0-ab9f127847d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:11:21][350675291068505][6827 ms][DEBUG] proc_open done in 6404 ms; code=255; res.len=3343 [2025-08-23 09:11:21][350675291068505][6827 ms][DEBUG] END runCmdUntilRes#1 in 6404 ms [2025-08-23 09:11:21][350675291068505][6827 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:12:03][354106242562673][1 ms][INFO] === Request start === [2025-08-23 09:12:03][354106242562673][2 ms][DEBUG] START check_scloud [2025-08-23 09:12:03][354106242562673][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:12:03][354106242562673][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 13554 4970 24819452 207936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:12:03][354106242562673][269 ms][DEBUG] targetPkg: running [2025-08-23 09:12:03][354106242562673][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 09:12:03][354106242562673][269 ms][DEBUG] START check_boot_completed [2025-08-23 09:12:03][354106242562673][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:12:03][354106242562673][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:12:03][354106242562673][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:12:03][354106242562673][349 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 09:12:03][354106242562673][349 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-23 09:12:03][354106242562673][349 ms][DEBUG] START check_internet [2025-08-23 09:12:03][354106242562673][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.594/179.594/179.594/0.000 ms\n [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] check_internet: online [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] END check_internet in 311 ms [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:12:04][354106242562673][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106242562673\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3139\"}'\'' -e'"" [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:12:04][354106242562673][660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106242562673\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3139\"}'\'' -e'"" [2025-08-23 09:12:08][354106242562673][4628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53ff375d-ef32-4c58-97b2-132693d96adf","id":"QR_53ff375d-ef32-4c58-97b2-132693d96adf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:12:08][354106242562673][4784 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-23 09:12:08][354106242562673][4784 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-23 09:12:08][354106242562673][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:13:02][350013886341691][1 ms][INFO] === Request start === [2025-08-23 09:13:02][350013886341691][2 ms][DEBUG] START check_scloud [2025-08-23 09:13:02][350013886341691][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:13:03][350013886341691][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 13554 4970 24933348 218120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:13:03][350013886341691][283 ms][DEBUG] targetPkg: running [2025-08-23 09:13:03][350013886341691][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 09:13:03][350013886341691][283 ms][DEBUG] START check_boot_completed [2025-08-23 09:13:03][350013886341691][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:13:03][350013886341691][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:13:03][350013886341691][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:13:03][350013886341691][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:13:03][350013886341691][376 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:13:03][350013886341691][376 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:13:03][350013886341691][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886341691\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4261\"}'\'' -e'"" [2025-08-23 09:13:03][350013886341691][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:13:03][350013886341691][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886341691\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4261\"}'\'' -e'"" [2025-08-23 09:13:07][350013886341691][4328 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 09:13:07][350013886341691][4328 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 09:13:07][350013886341691][4328 ms][WARN] Detected error: Process with pid 13554 either refused to load frida-agent, or terminated during injection [2025-08-23 09:13:07][350013886341691][4328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 09:13:07][350013886341691][4484 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 09:13:07][350013886341691][4484 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 09:13:07][350013886341691][4484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 09:13:07][350013886341691][4625 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 09:13:07][350013886341691][4625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 09:13:07][350013886341691][4797 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 09:13:09][350013886341691][6812 ms][DEBUG] START check_boot_completed [2025-08-23 09:13:09][350013886341691][6812 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:13:09][350013886341691][6859 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:13:09][350013886341691][6859 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:13:09][350013886341691][6906 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:13:09][350013886341691][6906 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 09:13:12][350013886341691][9920 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 09:13:12][350013886341691][9920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886341691\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4261\"}'\'' -e'"" [2025-08-23 09:13:16][350013886341691][14107 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d7ff1f2-a616-4379-9864-23e0e9e8c3fd","id":"QR_8d7ff1f2-a616-4379-9864-23e0e9e8c3fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:13:17][350013886341691][14263 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-23 09:13:17][350013886341691][14263 ms][DEBUG] END runCmdUntilRes#2 in 4343 ms [2025-08-23 09:13:17][350013886341691][14263 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:14:04][352271520672305][0 ms][INFO] === Request start === [2025-08-23 09:14:04][352271520672305][1 ms][DEBUG] START check_scloud [2025-08-23 09:14:04][352271520672305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:14:04][352271520672305][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 16545 4970 23488436 126324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:14:04][352271520672305][289 ms][DEBUG] targetPkg: running [2025-08-23 09:14:04][352271520672305][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 09:14:04][352271520672305][289 ms][DEBUG] START check_boot_completed [2025-08-23 09:14:04][352271520672305][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:14:04][352271520672305][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:14:04][352271520672305][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:14:04][352271520672305][414 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 09:14:04][352271520672305][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 09:14:04][352271520672305][414 ms][DEBUG] START check_internet [2025-08-23 09:14:04][352271520672305][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.400/204.400/204.400/0.000 ms\n [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] check_internet: online [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] END check_internet in 578 ms [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] rawBody.length=1149 [2025-08-23 09:14:05][352271520672305][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271520672305\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4525\"}'\'' -e'"" [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:14:05][352271520672305][992 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271520672305\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4525\"}'\'' -e'"" [2025-08-23 09:14:12][352271520672305][7990 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a86abbdd-4031-4b50-b5ba-99800de2669a","id":"QR_a86abbdd-4031-4b50-b5ba-99800de2669a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:14:12][352271520672305][8146 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=3343 [2025-08-23 09:14:12][352271520672305][8146 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-08-23 09:14:12][352271520672305][8146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:15:02][351351021662517][0 ms][INFO] === Request start === [2025-08-23 09:15:02][351351021662517][1 ms][DEBUG] START check_scloud [2025-08-23 09:15:02][351351021662517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:15:03][351351021662517][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 16545 4970 23610328 136600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:15:03][351351021662517][308 ms][DEBUG] targetPkg: running [2025-08-23 09:15:03][351351021662517][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 09:15:03][351351021662517][308 ms][DEBUG] START check_boot_completed [2025-08-23 09:15:03][351351021662517][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:15:03][351351021662517][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 09:15:03][351351021662517][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:15:03][351351021662517][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:15:03][351351021662517][416 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 09:15:03][351351021662517][416 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:15:03][351351021662517][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351021662517\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3464\"}'\'' -e'"" [2025-08-23 09:15:03][351351021662517][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:15:03][351351021662517][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351021662517\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3464\"}'\'' -e'"" [2025-08-23 09:15:07][351351021662517][4540 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e75043cd-e3af-4702-b741-21d7884ee2e7","id":"QR_e75043cd-e3af-4702-b741-21d7884ee2e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:15:07][351351021662517][4696 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 09:15:07][351351021662517][4696 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 09:15:07][351351021662517][4696 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:16:03][350013884325274][1 ms][INFO] === Request start === [2025-08-23 09:16:03][350013884325274][2 ms][DEBUG] START check_scloud [2025-08-23 09:16:03][350013884325274][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:16:03][350013884325274][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 16545 4970 23698224 148280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:16:03][350013884325274][317 ms][DEBUG] targetPkg: running [2025-08-23 09:16:03][350013884325274][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 09:16:03][350013884325274][317 ms][DEBUG] START check_boot_completed [2025-08-23 09:16:03][350013884325274][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:16:03][350013884325274][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:16:03][350013884325274][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:16:03][350013884325274][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:16:03][350013884325274][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:16:03][350013884325274][426 ms][DEBUG] START check_internet [2025-08-23 09:16:03][350013884325274][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.548/241.548/241.548/0.000 ms\n [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] check_internet: online [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] END check_internet in 375 ms [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:16:04][350013884325274][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884325274\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2553\"}'\'' -e'"" [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:16:04][350013884325274][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884325274\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2553\"}'\'' -e'"" [2025-08-23 09:16:08][350013884325274][4815 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e34504e2-3a4e-48c4-b8f4-0f9061cb2b40","id":"QR_e34504e2-3a4e-48c4-b8f4-0f9061cb2b40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:16:08][350013884325274][4972 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 09:16:08][350013884325274][4972 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 09:16:08][350013884325274][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:18:03][353684140652052][0 ms][INFO] === Request start === [2025-08-23 09:18:03][353684140652052][1 ms][DEBUG] START check_scloud [2025-08-23 09:18:03][353684140652052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:18:03][353684140652052][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 16545 4970 23897996 159672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:18:03][353684140652052][268 ms][DEBUG] targetPkg: running [2025-08-23 09:18:03][353684140652052][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 09:18:03][353684140652052][268 ms][DEBUG] START check_boot_completed [2025-08-23 09:18:03][353684140652052][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:18:03][353684140652052][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:18:03][353684140652052][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:18:03][353684140652052][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:18:03][353684140652052][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 09:18:03][353684140652052][347 ms][DEBUG] START check_internet [2025-08-23 09:18:03][353684140652052][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:18:03][353684140652052][690 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.459/228.459/228.459/0.000 ms\n [2025-08-23 09:18:03][353684140652052][690 ms][DEBUG] check_internet: online [2025-08-23 09:18:03][353684140652052][690 ms][DEBUG] END check_internet in 344 ms [2025-08-23 09:18:03][353684140652052][690 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:18:03][353684140652052][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140652052\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6381\"}'\'' -e'"" [2025-08-23 09:18:03][353684140652052][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:18:03][353684140652052][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140652052\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6381\"}'\'' -e'"" [2025-08-23 09:18:07][353684140652052][4502 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19cf0020-9332-439b-912b-1edb6fe1b4f9","id":"QR_19cf0020-9332-439b-912b-1edb6fe1b4f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:18:07][353684140652052][4658 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-23 09:18:07][353684140652052][4658 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 09:18:07][353684140652052][4658 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:22:03][350356670697301][1 ms][INFO] === Request start === [2025-08-23 09:22:03][350356670697301][2 ms][DEBUG] START check_scloud [2025-08-23 09:22:03][350356670697301][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:22:03][350356670697301][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 16545 4970 24032308 171300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:22:03][350356670697301][320 ms][DEBUG] targetPkg: running [2025-08-23 09:22:03][350356670697301][320 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 09:22:03][350356670697301][320 ms][DEBUG] START check_boot_completed [2025-08-23 09:22:03][350356670697301][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:22:03][350356670697301][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:22:03][350356670697301][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:22:03][350356670697301][416 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 09:22:03][350356670697301][416 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 09:22:03][350356670697301][416 ms][DEBUG] START check_internet [2025-08-23 09:22:03][350356670697301][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] SU: done in 482 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.964/201.964/201.964/0.000 ms\n [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] check_internet: online [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] END check_internet in 482 ms [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:22:03][350356670697301][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356670697301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:22:03][350356670697301][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356670697301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-08-23 09:22:07][350356670697301][4897 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb7e7820-e220-4339-bb99-5dc1119d2e3c","id":"QR_fb7e7820-e220-4339-bb99-5dc1119d2e3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:22:08][350356670697301][5053 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 09:22:08][350356670697301][5053 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 09:22:08][350356670697301][5053 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:24:03][350347641967931][0 ms][INFO] === Request start === [2025-08-23 09:24:03][350347641967931][1 ms][DEBUG] START check_scloud [2025-08-23 09:24:03][350347641967931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:24:04][350347641967931][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 16545 4970 24167704 183456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:24:04][350347641967931][303 ms][DEBUG] targetPkg: running [2025-08-23 09:24:04][350347641967931][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 09:24:04][350347641967931][303 ms][DEBUG] START check_boot_completed [2025-08-23 09:24:04][350347641967931][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:24:04][350347641967931][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:24:04][350347641967931][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:24:04][350347641967931][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:24:04][350347641967931][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:24:04][350347641967931][397 ms][DEBUG] START check_internet [2025-08-23 09:24:04][350347641967931][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:24:04][350347641967931][834 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.695/201.695/201.695/0.000 ms\n [2025-08-23 09:24:04][350347641967931][834 ms][DEBUG] check_internet: online [2025-08-23 09:24:04][350347641967931][834 ms][DEBUG] END check_internet in 438 ms [2025-08-23 09:24:04][350347641967931][834 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:24:04][350347641967931][834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347641967931\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8552\"}'\'' -e'"" [2025-08-23 09:24:04][350347641967931][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:24:04][350347641967931][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347641967931\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8552\"}'\'' -e'"" [2025-08-23 09:24:08][350347641967931][5036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ee06678-abab-4d3d-afd2-9026977d74a1","id":"QR_7ee06678-abab-4d3d-afd2-9026977d74a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:24:08][350347641967931][5192 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 09:24:08][350347641967931][5192 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 09:24:08][350347641967931][5192 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:25:05][352590527093169][1 ms][INFO] === Request start === [2025-08-23 09:25:05][352590527093169][2 ms][DEBUG] START check_scloud [2025-08-23 09:25:05][352590527093169][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:25:05][352590527093169][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 16545 4970 24301564 194528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:25:05][352590527093169][306 ms][DEBUG] targetPkg: running [2025-08-23 09:25:05][352590527093169][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 09:25:05][352590527093169][306 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:05][352590527093169][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:05][352590527093169][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:25:05][352590527093169][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:05][352590527093169][401 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 09:25:05][352590527093169][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 09:25:05][352590527093169][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:25:05][352590527093169][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7835\"}'\'' -e'"" [2025-08-23 09:25:05][352590527093169][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:25:05][352590527093169][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7835\"}'\'' -e'"" [2025-08-23 09:25:09][352590527093169][4257 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 09:25:09][352590527093169][4414 ms][DEBUG] proc_open done in 4012 ms; code=255; res.len=115 [2025-08-23 09:25:09][352590527093169][4414 ms][DEBUG] END runCmdUntilRes#1 in 4012 ms [2025-08-23 09:25:09][352590527093169][4414 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 09:25:09][][0 ms][INFO] === Request start === [2025-08-23 09:25:09][][1 ms][DEBUG] START check_scloud [2025-08-23 09:25:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:25:10][][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 16545 4970 24472836 206392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:25:10][][258 ms][DEBUG] targetPkg: running [2025-08-23 09:25:10][][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 09:25:10][][258 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:10][][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:10][][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:25:10][][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:10][][353 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 09:25:10][][353 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 09:25:10][][353 ms][DEBUG] rawBody.length=1129 [2025-08-23 09:25:10][][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5966\"}'\'' -e'"" [2025-08-23 09:25:10][][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:25:10][][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5966\"}'\'' -e'"" [2025-08-23 09:25:13][][3835 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 09:25:13][][3991 ms][DEBUG] proc_open done in 3637 ms; code=255; res.len=107 [2025-08-23 09:25:13][][3991 ms][DEBUG] END runCmdUntilRes#1 in 3637 ms [2025-08-23 09:25:13][][3991 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 09:25:16][352590527093169][0 ms][INFO] === Request start === [2025-08-23 09:25:16][352590527093169][1 ms][DEBUG] START check_scloud [2025-08-23 09:25:16][352590527093169][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:25:16][352590527093169][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 16545 4970 24652172 216532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:25:16][352590527093169][254 ms][DEBUG] targetPkg: running [2025-08-23 09:25:16][352590527093169][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-23 09:25:16][352590527093169][254 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:16][352590527093169][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:16][352590527093169][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:25:16][352590527093169][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:16][352590527093169][363 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:25:16][352590527093169][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:25:16][352590527093169][363 ms][DEBUG] rawBody.length=1149 [2025-08-23 09:25:16][352590527093169][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1429\"}'\'' -e'"" [2025-08-23 09:25:16][352590527093169][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:25:16][352590527093169][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1429\"}'\'' -e'"" [2025-08-23 09:25:20][352590527093169][4253 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 09:25:20][352590527093169][4409 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=107 [2025-08-23 09:25:20][352590527093169][4409 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-23 09:25:20][352590527093169][4409 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 09:25:20][][0 ms][INFO] === Request start === [2025-08-23 09:25:20][][1 ms][DEBUG] START check_scloud [2025-08-23 09:25:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:25:21][][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 16545 4970 24786516 227452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:25:21][][257 ms][DEBUG] targetPkg: running [2025-08-23 09:25:21][][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 09:25:21][][257 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:21][][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:21][][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:25:21][][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:21][][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:25:21][][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 09:25:21][][351 ms][DEBUG] rawBody.length=1130 [2025-08-23 09:25:21][][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-23 09:25:21][][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:25:21][][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-23 09:25:25][][4599 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 09:25:25][][4755 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=107 [2025-08-23 09:25:25][][4755 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-08-23 09:25:25][][4755 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 09:25:27][357187982290169][0 ms][INFO] === Request start === [2025-08-23 09:25:27][357187982290169][1 ms][DEBUG] START check_scloud [2025-08-23 09:25:27][357187982290169][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:25:27][357187982290169][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 16545 4970 24900280 238304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:25:27][357187982290169][309 ms][DEBUG] targetPkg: running [2025-08-23 09:25:27][357187982290169][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 09:25:27][357187982290169][309 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:27][357187982290169][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:27][357187982290169][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:25:27][357187982290169][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:27][357187982290169][403 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 09:25:27][357187982290169][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 09:25:27][357187982290169][404 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:25:27][357187982290169][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357187982290169\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9359\"}'\'' -e'"" [2025-08-23 09:25:27][357187982290169][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:25:27][357187982290169][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357187982290169\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9359\"}'\'' -e'"" [2025-08-23 09:25:31][357187982290169][4245 ms][DEBUG] proc_open done in 3841 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 09:25:31][357187982290169][4245 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-23 09:25:31][357187982290169][4245 ms][WARN] Detected error: Process with pid 16545 either refused to load frida-agent, or terminated during injection [2025-08-23 09:25:31][357187982290169][4245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 09:25:31][357187982290169][4386 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 09:25:31][357187982290169][4386 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 09:25:31][357187982290169][4386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 09:25:32][357187982290169][4526 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 09:25:32][357187982290169][4526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 09:25:32][357187982290169][4682 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 09:25:34][357187982290169][6697 ms][DEBUG] START check_boot_completed [2025-08-23 09:25:34][357187982290169][6697 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:25:34][357187982290169][6744 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:25:34][357187982290169][6744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:25:34][357187982290169][6807 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 09:25:34][357187982290169][6807 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 09:25:37][357187982290169][9822 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 09:25:37][357187982290169][9822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357187982290169\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9359\"}'\'' -e'"" [2025-08-23 09:25:41][357187982290169][13868 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f01bb9c1-e662-4729-b456-97464be2b32c","id":"QR_f01bb9c1-e662-4729-b456-97464be2b32c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:25:41][357187982290169][14024 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 09:25:41][357187982290169][14024 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-23 09:25:41][357187982290169][14024 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:31:03][353809894154605][1 ms][INFO] === Request start === [2025-08-23 09:31:03][353809894154605][2 ms][DEBUG] START check_scloud [2025-08-23 09:31:03][353809894154605][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:31:03][353809894154605][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 18016 4970 23485284 126500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:31:03][353809894154605][281 ms][DEBUG] targetPkg: running [2025-08-23 09:31:03][353809894154605][281 ms][DEBUG] END check_scloud in 279 ms [2025-08-23 09:31:03][353809894154605][281 ms][DEBUG] START check_boot_completed [2025-08-23 09:31:03][353809894154605][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:31:03][353809894154605][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:31:03][353809894154605][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:31:03][353809894154605][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:31:03][353809894154605][359 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 09:31:03][353809894154605][359 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:31:03][353809894154605][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894154605\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5843\"}'\'' -e'"" [2025-08-23 09:31:03][353809894154605][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:31:03][353809894154605][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894154605\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5843\"}'\'' -e'"" [2025-08-23 09:31:08][353809894154605][4451 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e80980e-9f7d-42c3-ab77-addd66121225","id":"QR_6e80980e-9f7d-42c3-ab77-addd66121225","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:31:08][353809894154605][4608 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 09:31:08][353809894154605][4608 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 09:31:08][353809894154605][4608 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:33:03][352001412793459][0 ms][INFO] === Request start === [2025-08-23 09:33:03][352001412793459][1 ms][DEBUG] START check_scloud [2025-08-23 09:33:03][352001412793459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:33:03][352001412793459][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18016 4970 23642120 137828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:33:03][352001412793459][314 ms][DEBUG] targetPkg: running [2025-08-23 09:33:03][352001412793459][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 09:33:03][352001412793459][314 ms][DEBUG] START check_boot_completed [2025-08-23 09:33:03][352001412793459][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:33:03][352001412793459][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:33:03][352001412793459][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:33:04][352001412793459][438 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 09:33:04][352001412793459][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 09:33:04][352001412793459][439 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:33:04][352001412793459][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001412793459\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-08-23 09:33:04][352001412793459][439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:33:04][352001412793459][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001412793459\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-08-23 09:33:08][352001412793459][4797 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11d4acca-d4d9-4767-a8d4-1f84843c32ac","id":"QR_11d4acca-d4d9-4767-a8d4-1f84843c32ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:33:08][352001412793459][4953 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-23 09:33:08][352001412793459][4953 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-23 09:33:08][352001412793459][4953 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:36:03][351272339045692][1 ms][INFO] === Request start === [2025-08-23 09:36:03][351272339045692][2 ms][DEBUG] START check_scloud [2025-08-23 09:36:03][351272339045692][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:36:03][351272339045692][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18016 4970 23770412 149100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:36:03][351272339045692][306 ms][DEBUG] targetPkg: running [2025-08-23 09:36:03][351272339045692][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 09:36:03][351272339045692][306 ms][DEBUG] START check_boot_completed [2025-08-23 09:36:03][351272339045692][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:36:03][351272339045692][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:36:03][351272339045692][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:36:03][351272339045692][430 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 09:36:03][351272339045692][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 09:36:03][351272339045692][431 ms][DEBUG] START check_internet [2025-08-23 09:36:03][351272339045692][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:36:04][351272339045692][961 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.315/201.315/201.315/0.000 ms\n [2025-08-23 09:36:04][351272339045692][962 ms][DEBUG] check_internet: online [2025-08-23 09:36:04][351272339045692][962 ms][DEBUG] END check_internet in 531 ms [2025-08-23 09:36:04][351272339045692][962 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:36:04][351272339045692][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339045692\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5443\"}'\'' -e'"" [2025-08-23 09:36:04][351272339045692][962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:36:04][351272339045692][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339045692\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5443\"}'\'' -e'"" [2025-08-23 09:36:08][351272339045692][5210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1b71445-3c2b-446d-b5d4-76cead6df23c","id":"QR_c1b71445-3c2b-446d-b5d4-76cead6df23c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:36:08][351272339045692][5367 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 09:36:08][351272339045692][5367 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 09:36:08][351272339045692][5367 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:36:10][354068192738929][0 ms][INFO] === Request start === [2025-08-23 09:36:10][354068192738929][1 ms][DEBUG] START check_scloud [2025-08-23 09:36:10][354068192738929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:36:11][354068192738929][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 18016 4970 23910708 160728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:36:11][354068192738929][314 ms][DEBUG] targetPkg: running [2025-08-23 09:36:11][354068192738929][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 09:36:11][354068192738929][314 ms][DEBUG] START check_boot_completed [2025-08-23 09:36:11][354068192738929][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:36:11][354068192738929][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:36:11][354068192738929][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:36:11][354068192738929][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:36:11][354068192738929][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 09:36:11][354068192738929][407 ms][DEBUG] START check_internet [2025-08-23 09:36:11][354068192738929][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:36:11][354068192738929][704 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.521/188.521/188.521/0.000 ms\n [2025-08-23 09:36:11][354068192738929][704 ms][DEBUG] check_internet: online [2025-08-23 09:36:11][354068192738929][704 ms][DEBUG] END check_internet in 297 ms [2025-08-23 09:36:11][354068192738929][704 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:36:11][354068192738929][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192738929\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-23 09:36:11][354068192738929][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:36:11][354068192738929][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192738929\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-23 09:36:15][354068192738929][4422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56dbf50e-28ad-482c-97ff-c27dd3ccb775","id":"QR_56dbf50e-28ad-482c-97ff-c27dd3ccb775","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:36:15][354068192738929][4578 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-23 09:36:15][354068192738929][4578 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-23 09:36:15][354068192738929][4578 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:38:02][352192664080297][1 ms][INFO] === Request start === [2025-08-23 09:38:02][352192664080297][2 ms][DEBUG] START check_scloud [2025-08-23 09:38:03][352192664080297][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:38:03][352192664080297][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 18016 4970 24018100 171304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:38:03][352192664080297][296 ms][DEBUG] targetPkg: running [2025-08-23 09:38:03][352192664080297][296 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 09:38:03][352192664080297][296 ms][DEBUG] START check_boot_completed [2025-08-23 09:38:03][352192664080297][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:38:03][352192664080297][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:38:03][352192664080297][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:38:03][352192664080297][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:38:03][352192664080297][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:38:03][352192664080297][405 ms][DEBUG] START check_internet [2025-08-23 09:38:03][352192664080297][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:38:03][352192664080297][951 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.318/201.318/201.318/0.000 ms\n [2025-08-23 09:38:03][352192664080297][951 ms][DEBUG] check_internet: online [2025-08-23 09:38:03][352192664080297][951 ms][DEBUG] END check_internet in 546 ms [2025-08-23 09:38:03][352192664080297][952 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:38:03][352192664080297][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664080297\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6099\"}'\'' -e'"" [2025-08-23 09:38:03][352192664080297][952 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:38:03][352192664080297][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664080297\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6099\"}'\'' -e'"" [2025-08-23 09:38:08][352192664080297][5044 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74205fac-a5c2-45f5-b1d1-23f4055d9319","id":"QR_74205fac-a5c2-45f5-b1d1-23f4055d9319","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:38:08][352192664080297][5200 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 09:38:08][352192664080297][5200 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 09:38:08][352192664080297][5200 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:44:03][355382704216996][1 ms][INFO] === Request start === [2025-08-23 09:44:03][355382704216996][2 ms][DEBUG] START check_scloud [2025-08-23 09:44:03][355382704216996][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:44:03][355382704216996][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 18016 4970 24139032 183680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:44:03][355382704216996][303 ms][DEBUG] targetPkg: running [2025-08-23 09:44:03][355382704216996][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 09:44:03][355382704216996][303 ms][DEBUG] START check_boot_completed [2025-08-23 09:44:03][355382704216996][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:44:03][355382704216996][365 ms][DEBUG] ADB: done in 62 ms; out [2025-08-23 09:44:03][355382704216996][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:44:03][355382704216996][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:44:03][355382704216996][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:44:03][355382704216996][412 ms][DEBUG] START check_internet [2025-08-23 09:44:03][355382704216996][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:44:04][355382704216996][896 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.855/200.855/200.855/0.000 ms\n [2025-08-23 09:44:04][355382704216996][896 ms][DEBUG] check_internet: online [2025-08-23 09:44:04][355382704216996][897 ms][DEBUG] END check_internet in 485 ms [2025-08-23 09:44:04][355382704216996][897 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:44:04][355382704216996][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704216996\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9531\"}'\'' -e'"" [2025-08-23 09:44:04][355382704216996][897 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:44:04][355382704216996][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704216996\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9531\"}'\'' -e'"" [2025-08-23 09:44:08][355382704216996][4880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89890579-7496-41ad-9102-cfa49c8d490f","id":"QR_89890579-7496-41ad-9102-cfa49c8d490f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:44:08][355382704216996][5036 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 09:44:08][355382704216996][5036 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 09:44:08][355382704216996][5036 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:44:12][350091124733341][0 ms][INFO] === Request start === [2025-08-23 09:44:12][350091124733341][1 ms][DEBUG] START check_scloud [2025-08-23 09:44:12][350091124733341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:44:12][350091124733341][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18016 4970 24279456 194508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:44:12][350091124733341][302 ms][DEBUG] targetPkg: running [2025-08-23 09:44:12][350091124733341][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 09:44:12][350091124733341][302 ms][DEBUG] START check_boot_completed [2025-08-23 09:44:12][350091124733341][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:44:12][350091124733341][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:44:12][350091124733341][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:44:12][350091124733341][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:44:12][350091124733341][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:44:12][350091124733341][412 ms][DEBUG] START check_internet [2025-08-23 09:44:12][350091124733341][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.912/202.912/202.912/0.000 ms\n [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] check_internet: online [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] END check_internet in 328 ms [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] rawBody.length=1158 [2025-08-23 09:44:12][350091124733341][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124733341\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PT10JCANV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:44:12][350091124733341][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124733341\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PT10JCANV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-23 09:44:16][350091124733341][4426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f536a4c-f1be-4512-9d88-8b86a132224b","id":"QR_7f536a4c-f1be-4512-9d88-8b86a132224b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:44:16][350091124733341][4582 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-23 09:44:16][350091124733341][4582 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-23 09:44:16][350091124733341][4582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:44:19][352665187550961][0 ms][INFO] === Request start === [2025-08-23 09:44:19][352665187550961][1 ms][DEBUG] START check_scloud [2025-08-23 09:44:19][352665187550961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:44:19][352665187550961][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18016 4970 24434344 206384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:44:19][352665187550961][316 ms][DEBUG] targetPkg: running [2025-08-23 09:44:19][352665187550961][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 09:44:19][352665187550961][316 ms][DEBUG] START check_boot_completed [2025-08-23 09:44:19][352665187550961][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:44:19][352665187550961][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:44:19][352665187550961][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:44:19][352665187550961][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:44:19][352665187550961][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:44:19][352665187550961][426 ms][DEBUG] START check_internet [2025-08-23 09:44:19][352665187550961][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.945/221.945/221.945/0.000 ms\n [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] check_internet: online [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] END check_internet in 359 ms [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:44:19][352665187550961][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187550961\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4314\"}'\'' -e'"" [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:44:19][352665187550961][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187550961\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4314\"}'\'' -e'"" [2025-08-23 09:44:23][352665187550961][4331 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eddcfb3-7d28-4ee6-9392-6bafa05e9cd0","id":"QR_0eddcfb3-7d28-4ee6-9392-6bafa05e9cd0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:44:23][352665187550961][4487 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-08-23 09:44:23][352665187550961][4487 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-23 09:44:23][352665187550961][4487 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:46:03][350013881666738][1 ms][INFO] === Request start === [2025-08-23 09:46:03][350013881666738][2 ms][DEBUG] START check_scloud [2025-08-23 09:46:03][350013881666738][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:46:03][350013881666738][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 18016 4970 24539972 217604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:46:03][350013881666738][272 ms][DEBUG] targetPkg: running [2025-08-23 09:46:03][350013881666738][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-23 09:46:03][350013881666738][272 ms][DEBUG] START check_boot_completed [2025-08-23 09:46:03][350013881666738][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:46:03][350013881666738][303 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:46:03][350013881666738][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:46:03][350013881666738][365 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:46:03][350013881666738][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:46:03][350013881666738][365 ms][DEBUG] START check_internet [2025-08-23 09:46:03][350013881666738][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.638/223.638/223.638/0.000 ms\n [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] check_internet: online [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] END check_internet in 330 ms [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:46:04][350013881666738][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881666738\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:46:04][350013881666738][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881666738\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-23 09:46:08][350013881666738][4802 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37b2c2bd-0c58-482f-a252-15183224c8cc","id":"QR_37b2c2bd-0c58-482f-a252-15183224c8cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:46:08][350013881666738][4958 ms][DEBUG] proc_open done in 4262 ms; code=255; res.len=3343 [2025-08-23 09:46:08][350013881666738][4958 ms][DEBUG] END runCmdUntilRes#1 in 4262 ms [2025-08-23 09:46:08][350013881666738][4958 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:47:02][354747952464590][0 ms][INFO] === Request start === [2025-08-23 09:47:03][354747952464590][1 ms][DEBUG] START check_scloud [2025-08-23 09:47:03][354747952464590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:47:03][354747952464590][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 18016 4970 24680360 229480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:47:03][354747952464590][308 ms][DEBUG] targetPkg: running [2025-08-23 09:47:03][354747952464590][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 09:47:03][354747952464590][308 ms][DEBUG] START check_boot_completed [2025-08-23 09:47:03][354747952464590][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:47:03][354747952464590][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:47:03][354747952464590][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:47:03][354747952464590][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:47:03][354747952464590][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:47:03][354747952464590][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:47:03][354747952464590][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952464590\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-23 09:47:03][354747952464590][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:47:03][354747952464590][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952464590\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-23 09:47:07][354747952464590][4229 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caceb66f-71cd-4d86-94e2-d2c305d293fe","id":"QR_caceb66f-71cd-4d86-94e2-d2c305d293fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:47:07][354747952464590][4385 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 09:47:07][354747952464590][4385 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 09:47:07][354747952464590][4385 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:49:03][352469859954159][1 ms][INFO] === Request start === [2025-08-23 09:49:03][352469859954159][2 ms][DEBUG] START check_scloud [2025-08-23 09:49:03][352469859954159][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:49:04][352469859954159][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 18016 4970 24818700 240660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:49:04][352469859954159][310 ms][DEBUG] targetPkg: running [2025-08-23 09:49:04][352469859954159][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 09:49:04][352469859954159][310 ms][DEBUG] START check_boot_completed [2025-08-23 09:49:04][352469859954159][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:49:04][352469859954159][339 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 09:49:04][352469859954159][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:49:04][352469859954159][387 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 09:49:04][352469859954159][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 09:49:04][352469859954159][388 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:49:04][352469859954159][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859954159\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1716\"}'\'' -e'"" [2025-08-23 09:49:04][352469859954159][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:49:04][352469859954159][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859954159\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1716\"}'\'' -e'"" [2025-08-23 09:49:08][352469859954159][4542 ms][DEBUG] proc_open done in 4154 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 09:49:08][352469859954159][4542 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-23 09:49:08][352469859954159][4542 ms][WARN] Detected error: Process with pid 18016 either refused to load frida-agent, or terminated during injection [2025-08-23 09:49:08][352469859954159][4542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 09:49:08][352469859954159][4682 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 09:49:08][352469859954159][4682 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 09:49:08][352469859954159][4682 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 09:49:08][352469859954159][4807 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 09:49:08][352469859954159][4807 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 09:49:08][352469859954159][4979 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 09:49:10][352469859954159][6994 ms][DEBUG] START check_boot_completed [2025-08-23 09:49:10][352469859954159][6994 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:49:10][352469859954159][7041 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:49:10][352469859954159][7041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:49:10][352469859954159][7104 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 09:49:10][352469859954159][7104 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 09:49:14][352469859954159][10118 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 09:49:14][352469859954159][10118 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859954159\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1716\"}'\'' -e'"" [2025-08-23 09:49:18][352469859954159][14492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdda0853-c4b6-4fa4-8fd4-c90f46a07f6f","id":"QR_cdda0853-c4b6-4fa4-8fd4-c90f46a07f6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:49:18][352469859954159][14648 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-23 09:49:18][352469859954159][14649 ms][DEBUG] END runCmdUntilRes#2 in 4530 ms [2025-08-23 09:49:18][352469859954159][14649 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:50:03][351317841836276][1 ms][INFO] === Request start === [2025-08-23 09:50:03][351317841836276][2 ms][DEBUG] START check_scloud [2025-08-23 09:50:03][351317841836276][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:50:03][351317841836276][573 ms][DEBUG] SU: done in 572 ms; out [2025-08-23 09:50:03][351317841836276][573 ms][WARN] targetPkg: not running, restarting [2025-08-23 09:50:03][351317841836276][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 09:50:04][351317841836276][761 ms][DEBUG] SU: done in 187 ms; out [2025-08-23 09:50:04][351317841836276][761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 09:50:04][351317841836276][1089 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 09:50:06][351317841836276][3104 ms][DEBUG] END check_scloud in 3102 ms [2025-08-23 09:50:06][351317841836276][3104 ms][DEBUG] START check_boot_completed [2025-08-23 09:50:06][351317841836276][3104 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:50:06][351317841836276][3151 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:50:06][351317841836276][3151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:50:06][351317841836276][3213 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 09:50:06][351317841836276][3213 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 09:50:06][351317841836276][3213 ms][DEBUG] START check_internet [2025-08-23 09:50:06][351317841836276][3214 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:50:07][351317841836276][3869 ms][DEBUG] SU: done in 656 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.554/200.554/200.554/0.000 ms\n [2025-08-23 09:50:07][351317841836276][3869 ms][DEBUG] check_internet: online [2025-08-23 09:50:07][351317841836276][3870 ms][DEBUG] END check_internet in 656 ms [2025-08-23 09:50:07][351317841836276][3870 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:50:07][351317841836276][3870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841836276\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7090\"}'\'' -e'"" [2025-08-23 09:50:07][351317841836276][3870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:50:07][351317841836276][3870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841836276\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7090\"}'\'' -e'"" [2025-08-23 09:50:12][351317841836276][9493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ec6775-3fad-413a-8831-cac32b5bfe74","id":"QR_b8ec6775-3fad-413a-8831-cac32b5bfe74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:50:12][351317841836276][9649 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-08-23 09:50:12][351317841836276][9649 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-08-23 09:50:12][351317841836276][9649 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:53:03][352549936279405][1 ms][INFO] === Request start === [2025-08-23 09:53:03][352549936279405][2 ms][DEBUG] START check_scloud [2025-08-23 09:53:03][352549936279405][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:53:03][352549936279405][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23835 20801 23552616 62600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:53:03][352549936279405][311 ms][DEBUG] targetPkg: running [2025-08-23 09:53:03][352549936279405][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 09:53:03][352549936279405][312 ms][DEBUG] START check_boot_completed [2025-08-23 09:53:03][352549936279405][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:53:03][352549936279405][357 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 09:53:03][352549936279405][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:53:03][352549936279405][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:53:03][352549936279405][420 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 09:53:03][352549936279405][420 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:53:03][352549936279405][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936279405\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-08-23 09:53:03][352549936279405][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:53:03][352549936279405][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936279405\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-08-23 09:53:08][352549936279405][5246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1879882f-610d-40e6-97b3-700c4a126554","id":"QR_1879882f-610d-40e6-97b3-700c4a126554","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:53:08][352549936279405][5402 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-08-23 09:53:08][352549936279405][5403 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-08-23 09:53:08][352549936279405][5403 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:53:11][355094841165537][0 ms][INFO] === Request start === [2025-08-23 09:53:11][355094841165537][1 ms][DEBUG] START check_scloud [2025-08-23 09:53:11][355094841165537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:53:11][355094841165537][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 23835 20801 23678768 83460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:53:11][355094841165537][298 ms][DEBUG] targetPkg: running [2025-08-23 09:53:11][355094841165537][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 09:53:11][355094841165537][299 ms][DEBUG] START check_boot_completed [2025-08-23 09:53:11][355094841165537][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:53:11][355094841165537][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 09:53:11][355094841165537][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:53:11][355094841165537][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:53:11][355094841165537][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 09:53:11][355094841165537][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:53:11][355094841165537][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355094841165537\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9607\"}'\'' -e'"" [2025-08-23 09:53:11][355094841165537][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:53:11][355094841165537][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355094841165537\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9607\"}'\'' -e'"" [2025-08-23 09:53:15][355094841165537][4280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_813b4563-be80-41ae-8c03-63905243ad99","id":"QR_813b4563-be80-41ae-8c03-63905243ad99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:53:15][355094841165537][4437 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 09:53:15][355094841165537][4437 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 09:53:15][355094841165537][4437 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:54:03][352350274046948][1 ms][INFO] === Request start === [2025-08-23 09:54:03][352350274046948][2 ms][DEBUG] START check_scloud [2025-08-23 09:54:03][352350274046948][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:54:03][352350274046948][332 ms][DEBUG] SU: done in 330 ms; outu0_a118 23835 20801 23823280 95652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:54:03][352350274046948][332 ms][DEBUG] targetPkg: running [2025-08-23 09:54:03][352350274046948][332 ms][DEBUG] END check_scloud in 331 ms [2025-08-23 09:54:03][352350274046948][332 ms][DEBUG] START check_boot_completed [2025-08-23 09:54:03][352350274046948][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:54:03][352350274046948][363 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 09:54:03][352350274046948][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:54:03][352350274046948][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:54:03][352350274046948][410 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 09:54:03][352350274046948][410 ms][DEBUG] START check_internet [2025-08-23 09:54:03][352350274046948][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:54:04][352350274046948][894 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.685/200.685/200.685/0.000 ms\n [2025-08-23 09:54:04][352350274046948][894 ms][DEBUG] check_internet: online [2025-08-23 09:54:04][352350274046948][894 ms][DEBUG] END check_internet in 484 ms [2025-08-23 09:54:04][352350274046948][894 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:54:04][352350274046948][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274046948\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6636\"}'\'' -e'"" [2025-08-23 09:54:04][352350274046948][895 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:54:04][352350274046948][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274046948\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6636\"}'\'' -e'"" [2025-08-23 09:54:08][352350274046948][5159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0fa22a2-8081-4511-8fff-7b7a3242e256","id":"QR_c0fa22a2-8081-4511-8fff-7b7a3242e256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:54:08][352350274046948][5315 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 09:54:08][352350274046948][5315 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 09:54:08][352350274046948][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:56:03][354068196224538][0 ms][INFO] === Request start === [2025-08-23 09:56:03][354068196224538][1 ms][DEBUG] START check_scloud [2025-08-23 09:56:03][354068196224538][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:56:03][354068196224538][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 23835 20801 23939220 108376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:56:03][354068196224538][320 ms][DEBUG] targetPkg: running [2025-08-23 09:56:03][354068196224538][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 09:56:03][354068196224538][320 ms][DEBUG] START check_boot_completed [2025-08-23 09:56:03][354068196224538][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:56:03][354068196224538][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:56:03][354068196224538][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:56:03][354068196224538][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:56:03][354068196224538][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:56:03][354068196224538][429 ms][DEBUG] START check_internet [2025-08-23 09:56:03][354068196224538][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:56:03][354068196224538][820 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.847/244.847/244.847/0.000 ms\n [2025-08-23 09:56:03][354068196224538][820 ms][DEBUG] check_internet: online [2025-08-23 09:56:03][354068196224538][820 ms][DEBUG] END check_internet in 391 ms [2025-08-23 09:56:03][354068196224538][820 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:56:03][354068196224538][820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196224538\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5837\"}'\'' -e'"" [2025-08-23 09:56:03][354068196224538][820 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:56:03][354068196224538][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196224538\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5837\"}'\'' -e'"" [2025-08-23 09:56:08][354068196224538][5162 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdf7a1d6-b78d-453d-81c7-b97eadeb8c8d","id":"QR_fdf7a1d6-b78d-453d-81c7-b97eadeb8c8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:56:08][354068196224538][5319 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-23 09:56:08][354068196224538][5319 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-23 09:56:08][354068196224538][5319 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:56:10][350146810420403][1 ms][INFO] === Request start === [2025-08-23 09:56:10][350146810420403][2 ms][DEBUG] START check_scloud [2025-08-23 09:56:10][350146810420403][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:56:11][350146810420403][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 23835 20801 24087964 119144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:56:11][350146810420403][320 ms][DEBUG] targetPkg: running [2025-08-23 09:56:11][350146810420403][320 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 09:56:11][350146810420403][320 ms][DEBUG] START check_boot_completed [2025-08-23 09:56:11][350146810420403][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:56:11][350146810420403][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:56:11][350146810420403][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:56:11][350146810420403][444 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 09:56:11][350146810420403][445 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 09:56:11][350146810420403][445 ms][DEBUG] START check_internet [2025-08-23 09:56:11][350146810420403][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.875/151.875/151.875/0.000 ms\n [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] check_internet: online [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] END check_internet in 265 ms [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:56:11][350146810420403][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350146810420403\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2467\"}'\'' -e'"" [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:56:11][350146810420403][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350146810420403\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2467\"}'\'' -e'"" [2025-08-23 09:56:15][350146810420403][4771 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d0d7abb-d9fd-4413-b2cc-475df400335a","id":"QR_2d0d7abb-d9fd-4413-b2cc-475df400335a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:56:15][350146810420403][4928 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-23 09:56:15][350146810420403][4928 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 09:56:15][350146810420403][4928 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:57:03][351351024330641][0 ms][INFO] === Request start === [2025-08-23 09:57:03][351351024330641][1 ms][DEBUG] START check_scloud [2025-08-23 09:57:03][351351024330641][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:57:04][351351024330641][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 23835 20801 24191580 131168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:57:04][351351024330641][314 ms][DEBUG] targetPkg: running [2025-08-23 09:57:04][351351024330641][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 09:57:04][351351024330641][314 ms][DEBUG] START check_boot_completed [2025-08-23 09:57:04][351351024330641][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:57:04][351351024330641][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:57:04][351351024330641][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:57:04][351351024330641][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:57:04][351351024330641][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 09:57:04][351351024330641][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:57:04][351351024330641][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024330641\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2668\"}'\'' -e'"" [2025-08-23 09:57:04][351351024330641][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:57:04][351351024330641][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351024330641\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2668\"}'\'' -e'"" [2025-08-23 09:57:08][351351024330641][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4d95d0d-4dcc-4277-a6b8-731d2bbccfe7","id":"QR_c4d95d0d-4dcc-4277-a6b8-731d2bbccfe7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:57:08][351351024330641][4687 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-23 09:57:08][351351024330641][4687 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-23 09:57:08][351351024330641][4687 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:58:05][353994912290860][1 ms][INFO] === Request start === [2025-08-23 09:58:05][353994912290860][2 ms][DEBUG] START check_scloud [2025-08-23 09:58:05][353994912290860][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:58:05][353994912290860][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 23835 20801 24342336 142232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:58:05][353994912290860][285 ms][DEBUG] targetPkg: running [2025-08-23 09:58:05][353994912290860][285 ms][DEBUG] END check_scloud in 283 ms [2025-08-23 09:58:05][353994912290860][285 ms][DEBUG] START check_boot_completed [2025-08-23 09:58:05][353994912290860][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:58:05][353994912290860][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 09:58:05][353994912290860][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:58:05][353994912290860][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 09:58:05][353994912290860][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 09:58:05][353994912290860][393 ms][DEBUG] START check_internet [2025-08-23 09:58:05][353994912290860][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:58:06][353994912290860][815 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.519/200.519/200.519/0.000 ms\n [2025-08-23 09:58:06][353994912290860][815 ms][DEBUG] check_internet: online [2025-08-23 09:58:06][353994912290860][816 ms][DEBUG] END check_internet in 422 ms [2025-08-23 09:58:06][353994912290860][816 ms][DEBUG] rawBody.length=1149 [2025-08-23 09:58:06][353994912290860][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912290860\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9276\"}'\'' -e'"" [2025-08-23 09:58:06][353994912290860][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:58:06][353994912290860][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912290860\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9276\"}'\'' -e'"" [2025-08-23 09:58:11][353994912290860][6298 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_547e03e3-9a49-42da-9f97-f65317fd024e","id":"QR_547e03e3-9a49-42da-9f97-f65317fd024e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:58:11][353994912290860][6454 ms][DEBUG] proc_open done in 5638 ms; code=255; res.len=3343 [2025-08-23 09:58:11][353994912290860][6454 ms][DEBUG] END runCmdUntilRes#1 in 5638 ms [2025-08-23 09:58:11][353994912290860][6454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 09:58:16][352053266520082][0 ms][INFO] === Request start === [2025-08-23 09:58:16][352053266520082][1 ms][DEBUG] START check_scloud [2025-08-23 09:58:16][352053266520082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 09:58:16][352053266520082][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 23835 20801 24531912 154032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 09:58:16][352053266520082][261 ms][DEBUG] targetPkg: running [2025-08-23 09:58:16][352053266520082][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 09:58:16][352053266520082][261 ms][DEBUG] START check_boot_completed [2025-08-23 09:58:16][352053266520082][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 09:58:16][352053266520082][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 09:58:16][352053266520082][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 09:58:16][352053266520082][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 09:58:16][352053266520082][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 09:58:16][352053266520082][355 ms][DEBUG] START check_internet [2025-08-23 09:58:16][352053266520082][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 09:58:17][352053266520082][667 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.435/200.435/200.435/0.000 ms\n [2025-08-23 09:58:17][352053266520082][667 ms][DEBUG] check_internet: online [2025-08-23 09:58:17][352053266520082][667 ms][DEBUG] END check_internet in 313 ms [2025-08-23 09:58:17][352053266520082][667 ms][DEBUG] rawBody.length=1148 [2025-08-23 09:58:17][352053266520082][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266520082\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7971\"}'\'' -e'"" [2025-08-23 09:58:17][352053266520082][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 09:58:17][352053266520082][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266520082\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7971\"}'\'' -e'"" [2025-08-23 09:58:21][352053266520082][4900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_575576de-2c8c-4d0a-81c6-1f8018a831c4","id":"QR_575576de-2c8c-4d0a-81c6-1f8018a831c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 09:58:21][352053266520082][5057 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 09:58:21][352053266520082][5057 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 09:58:21][352053266520082][5057 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:00:04][351270411648425][0 ms][INFO] === Request start === [2025-08-23 10:00:04][351270411648425][1 ms][DEBUG] START check_scloud [2025-08-23 10:00:04][351270411648425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:00:04][351270411648425][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 23835 20801 24623240 164872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:00:04][351270411648425][323 ms][DEBUG] targetPkg: running [2025-08-23 10:00:04][351270411648425][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 10:00:04][351270411648425][323 ms][DEBUG] START check_boot_completed [2025-08-23 10:00:04][351270411648425][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:00:04][351270411648425][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:00:04][351270411648425][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:00:04][351270411648425][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:00:04][351270411648425][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:00:04][351270411648425][416 ms][DEBUG] START check_internet [2025-08-23 10:00:04][351270411648425][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.260/202.260/202.260/0.000 ms\n [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] check_internet: online [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] END check_internet in 406 ms [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:00:05][351270411648425][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411648425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7596\"}'\'' -e'"" [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:00:05][351270411648425][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411648425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7596\"}'\'' -e'"" [2025-08-23 10:00:09][351270411648425][5087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e1143d1-cdc5-4c7e-9049-a3ef085f80fa","id":"QR_3e1143d1-cdc5-4c7e-9049-a3ef085f80fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:00:09][351270411648425][5243 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 10:00:09][351270411648425][5243 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 10:00:09][351270411648425][5243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:02:02][354462110866963][1 ms][INFO] === Request start === [2025-08-23 10:02:02][354462110866963][2 ms][DEBUG] START check_scloud [2025-08-23 10:02:02][354462110866963][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:02:03][354462110866963][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 23835 20801 24751468 177140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:02:03][354462110866963][313 ms][DEBUG] targetPkg: running [2025-08-23 10:02:03][354462110866963][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 10:02:03][354462110866963][314 ms][DEBUG] START check_boot_completed [2025-08-23 10:02:03][354462110866963][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:02:03][354462110866963][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:02:03][354462110866963][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:02:03][354462110866963][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:02:03][354462110866963][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:02:03][354462110866963][407 ms][DEBUG] START check_internet [2025-08-23 10:02:03][354462110866963][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.199/233.199/233.199/0.000 ms\n [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] check_internet: online [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] END check_internet in 375 ms [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:02:03][354462110866963][782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354462110866963\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ROM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2928\"}'\'' -e'"" [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:02:03][354462110866963][782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354462110866963\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ROM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2928\"}'\'' -e'"" [2025-08-23 10:02:08][354462110866963][5218 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fec07e9c-baf0-4a65-aedc-1cd4546bb3d1","id":"QR_fec07e9c-baf0-4a65-aedc-1cd4546bb3d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:02:08][354462110866963][5374 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 10:02:08][354462110866963][5374 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 10:02:08][354462110866963][5374 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:03:03][354747952789939][0 ms][INFO] === Request start === [2025-08-23 10:03:03][354747952789939][1 ms][DEBUG] START check_scloud [2025-08-23 10:03:03][354747952789939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:03:03][354747952789939][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 23835 20801 24889808 187928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:03:03][354747952789939][305 ms][DEBUG] targetPkg: running [2025-08-23 10:03:03][354747952789939][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 10:03:03][354747952789939][305 ms][DEBUG] START check_boot_completed [2025-08-23 10:03:03][354747952789939][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:03:03][354747952789939][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:03:03][354747952789939][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:03:03][354747952789939][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:03:03][354747952789939][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 10:03:03][354747952789939][383 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:03:03][354747952789939][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952789939\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8636\"}'\'' -e'"" [2025-08-23 10:03:03][354747952789939][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:03:03][354747952789939][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952789939\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8636\"}'\'' -e'"" [2025-08-23 10:03:07][354747952789939][4835 ms][DEBUG] proc_open done in 4452 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 10:03:07][354747952789939][4835 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-23 10:03:07][354747952789939][4835 ms][WARN] Detected error: Process with pid 23835 either refused to load frida-agent, or terminated during injection [2025-08-23 10:03:07][354747952789939][4835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 10:03:08][354747952789939][4976 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 10:03:08][354747952789939][4976 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 10:03:08][354747952789939][4976 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:03:08][354747952789939][5116 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 10:03:08][354747952789939][5116 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:03:08][354747952789939][5288 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 10:03:10][354747952789939][7303 ms][DEBUG] START check_boot_completed [2025-08-23 10:03:10][354747952789939][7303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:03:10][354747952789939][7350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:03:10][354747952789939][7350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:03:10][354747952789939][7397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:03:10][354747952789939][7397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:03:13][354747952789939][10412 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 10:03:13][354747952789939][10412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952789939\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8636\"}'\'' -e'"" [2025-08-23 10:03:17][354747952789939][14630 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fcd60c3e-8dc6-4887-8d04-45ddc38188f2","id":"QR_fcd60c3e-8dc6-4887-8d04-45ddc38188f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:03:17][354747952789939][14786 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 10:03:17][354747952789939][14786 ms][DEBUG] END runCmdUntilRes#2 in 4374 ms [2025-08-23 10:03:17][354747952789939][14786 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:05:03][351031121175848][1 ms][INFO] === Request start === [2025-08-23 10:05:03][351031121175848][2 ms][DEBUG] START check_scloud [2025-08-23 10:05:03][351031121175848][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:05:03][351031121175848][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 1077 20801 23466856 128072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:05:03][351031121175848][306 ms][DEBUG] targetPkg: running [2025-08-23 10:05:03][351031121175848][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 10:05:03][351031121175848][307 ms][DEBUG] START check_boot_completed [2025-08-23 10:05:03][351031121175848][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:05:04][351031121175848][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:05:04][351031121175848][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:05:04][351031121175848][431 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 10:05:04][351031121175848][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 10:05:04][351031121175848][431 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:05:04][351031121175848][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121175848\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5907\"}'\'' -e'"" [2025-08-23 10:05:04][351031121175848][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:05:04][351031121175848][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121175848\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5907\"}'\'' -e'"" [2025-08-23 10:05:08][351031121175848][4758 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_471eaa95-856a-4284-94ed-97b83e414e5a","id":"QR_471eaa95-856a-4284-94ed-97b83e414e5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:05:08][351031121175848][4914 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 10:05:08][351031121175848][4914 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 10:05:08][351031121175848][4914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:06:03][352923548444352][1 ms][INFO] === Request start === [2025-08-23 10:06:03][352923548444352][1 ms][DEBUG] START check_scloud [2025-08-23 10:06:03][352923548444352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:06:04][352923548444352][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 1077 20801 23590904 138924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:06:04][352923548444352][315 ms][DEBUG] targetPkg: running [2025-08-23 10:06:04][352923548444352][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 10:06:04][352923548444352][315 ms][DEBUG] START check_boot_completed [2025-08-23 10:06:04][352923548444352][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:06:04][352923548444352][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:06:04][352923548444352][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:06:04][352923548444352][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:06:04][352923548444352][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:06:04][352923548444352][424 ms][DEBUG] START check_internet [2025-08-23 10:06:04][352923548444352][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] SU: done in 517 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.817/202.817/202.817/0.000 ms\n [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] check_internet: online [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] END check_internet in 517 ms [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:06:04][352923548444352][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548444352\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2687\"}'\'' -e'"" [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:06:04][352923548444352][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548444352\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2687\"}'\'' -e'"" [2025-08-23 10:06:08][352923548444352][5173 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_709035ba-86b7-497e-880b-f12ae506d0df","id":"QR_709035ba-86b7-497e-880b-f12ae506d0df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:06:09][352923548444352][5329 ms][DEBUG] proc_open done in 4388 ms; code=255; res.len=3343 [2025-08-23 10:06:09][352923548444352][5329 ms][DEBUG] END runCmdUntilRes#1 in 4388 ms [2025-08-23 10:06:09][352923548444352][5329 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:08:03][354360418053583][1 ms][INFO] === Request start === [2025-08-23 10:08:03][354360418053583][2 ms][DEBUG] START check_scloud [2025-08-23 10:08:03][354360418053583][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:08:03][354360418053583][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 1077 20801 23755868 149980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:08:03][354360418053583][332 ms][DEBUG] targetPkg: running [2025-08-23 10:08:03][354360418053583][332 ms][DEBUG] END check_scloud in 330 ms [2025-08-23 10:08:03][354360418053583][332 ms][DEBUG] START check_boot_completed [2025-08-23 10:08:03][354360418053583][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:08:03][354360418053583][378 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:08:03][354360418053583][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:08:03][354360418053583][441 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:08:03][354360418053583][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:08:03][354360418053583][441 ms][DEBUG] START check_internet [2025-08-23 10:08:03][354360418053583][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.937/264.937/264.937/0.000 ms\n [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] check_internet: online [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] END check_internet in 375 ms [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:08:04][354360418053583][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6687\"}'\'' -e'"" [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:08:04][354360418053583][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6687\"}'\'' -e'"" [2025-08-23 10:08:08][354360418053583][5471 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40171fe1-98af-4716-aa0e-af83fc15b004","id":"QR_40171fe1-98af-4716-aa0e-af83fc15b004","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:08:08][354360418053583][5627 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-23 10:08:08][354360418053583][5627 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-23 10:08:08][354360418053583][5627 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:17:03][350814490737814][1 ms][INFO] === Request start === [2025-08-23 10:17:03][350814490737814][2 ms][DEBUG] START check_scloud [2025-08-23 10:17:03][350814490737814][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:17:03][350814490737814][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 1077 20801 23886452 160856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:17:03][350814490737814][271 ms][DEBUG] targetPkg: running [2025-08-23 10:17:03][350814490737814][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-23 10:17:03][350814490737814][271 ms][DEBUG] START check_boot_completed [2025-08-23 10:17:03][350814490737814][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:17:03][350814490737814][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:17:03][350814490737814][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:17:04][350814490737814][365 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:17:04][350814490737814][365 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:17:04][350814490737814][365 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:17:04][350814490737814][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814490737814\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6797\"}'\'' -e'"" [2025-08-23 10:17:04][350814490737814][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:17:04][350814490737814][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814490737814\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6797\"}'\'' -e'"" [2025-08-23 10:17:08][350814490737814][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2802011a-dbb3-4d75-9469-04b103ce802c","id":"QR_2802011a-dbb3-4d75-9469-04b103ce802c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:17:08][350814490737814][5005 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-23 10:17:08][350814490737814][5005 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-08-23 10:17:08][350814490737814][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:19:03][352938779163018][0 ms][INFO] === Request start === [2025-08-23 10:19:03][352938779163018][1 ms][DEBUG] START check_scloud [2025-08-23 10:19:03][352938779163018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:19:04][352938779163018][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 1077 20801 24019876 170844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:19:04][352938779163018][323 ms][DEBUG] targetPkg: running [2025-08-23 10:19:04][352938779163018][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 10:19:04][352938779163018][323 ms][DEBUG] START check_boot_completed [2025-08-23 10:19:04][352938779163018][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:19:04][352938779163018][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:19:04][352938779163018][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:19:04][352938779163018][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:19:04][352938779163018][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:19:04][352938779163018][416 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:19:04][352938779163018][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779163018\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-08-23 10:19:04][352938779163018][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:19:04][352938779163018][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779163018\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-08-23 10:19:08][352938779163018][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d351d55f-384b-4a4c-9cfa-ce99383bc9c9","id":"QR_d351d55f-384b-4a4c-9cfa-ce99383bc9c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:19:08][352938779163018][4712 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 10:19:08][352938779163018][4712 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 10:19:08][352938779163018][4712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:19:11][350900922546830][1 ms][INFO] === Request start === [2025-08-23 10:19:11][350900922546830][2 ms][DEBUG] START check_scloud [2025-08-23 10:19:11][350900922546830][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:19:11][350900922546830][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 1077 20801 24152236 182748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:19:11][350900922546830][272 ms][DEBUG] targetPkg: running [2025-08-23 10:19:11][350900922546830][272 ms][DEBUG] END check_scloud in 270 ms [2025-08-23 10:19:11][350900922546830][272 ms][DEBUG] START check_boot_completed [2025-08-23 10:19:11][350900922546830][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:19:11][350900922546830][317 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 10:19:11][350900922546830][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:19:11][350900922546830][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:19:11][350900922546830][379 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-23 10:19:11][350900922546830][379 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:19:11][350900922546830][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922546830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5722\"}'\'' -e'"" [2025-08-23 10:19:11][350900922546830][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:19:11][350900922546830][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922546830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5722\"}'\'' -e'"" [2025-08-23 10:19:15][350900922546830][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f76d1d12-077e-4cf7-bdcc-319cb3e28483","id":"QR_f76d1d12-077e-4cf7-bdcc-319cb3e28483","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:19:15][350900922546830][4456 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-23 10:19:15][350900922546830][4456 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 10:19:15][350900922546830][4456 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:22:03][354916447160481][1 ms][INFO] === Request start === [2025-08-23 10:22:03][354916447160481][2 ms][DEBUG] START check_scloud [2025-08-23 10:22:03][354916447160481][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:22:03][354916447160481][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 1077 20801 24270188 187884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:22:03][354916447160481][262 ms][DEBUG] targetPkg: running [2025-08-23 10:22:03][354916447160481][262 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 10:22:03][354916447160481][262 ms][DEBUG] START check_boot_completed [2025-08-23 10:22:03][354916447160481][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:22:03][354916447160481][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:22:03][354916447160481][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:22:03][354916447160481][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:22:03][354916447160481][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 10:22:03][354916447160481][340 ms][DEBUG] START check_internet [2025-08-23 10:22:03][354916447160481][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.095/189.095/189.095/0.000 ms\n [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] check_internet: online [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] END check_internet in 469 ms [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:22:04][354916447160481][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447160481\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:22:04][354916447160481][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447160481\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-23 10:22:08][354916447160481][5026 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c111079-4f0f-4576-a7cc-52c3bd163cd7","id":"QR_4c111079-4f0f-4576-a7cc-52c3bd163cd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:22:08][354916447160481][5182 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 10:22:08][354916447160481][5182 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 10:22:08][354916447160481][5182 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:23:03][351031123947269][0 ms][INFO] === Request start === [2025-08-23 10:23:03][351031123947269][1 ms][DEBUG] START check_scloud [2025-08-23 10:23:03][351031123947269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:23:03][351031123947269][270 ms][DEBUG] SU: done in 268 ms; outu0_a118 1077 20801 24384080 188468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:23:03][351031123947269][270 ms][DEBUG] targetPkg: running [2025-08-23 10:23:03][351031123947269][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-23 10:23:03][351031123947269][270 ms][DEBUG] START check_boot_completed [2025-08-23 10:23:03][351031123947269][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:23:03][351031123947269][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:23:03][351031123947269][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:23:03][351031123947269][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:23:03][351031123947269][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:23:03][351031123947269][363 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:23:03][351031123947269][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123947269\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8013\"}'\'' -e'"" [2025-08-23 10:23:03][351031123947269][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:23:03][351031123947269][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123947269\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8013\"}'\'' -e'"" [2025-08-23 10:23:08][351031123947269][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13f8a6c5-15f0-4f6b-a1c9-31ea2966e0ef","id":"QR_13f8a6c5-15f0-4f6b-a1c9-31ea2966e0ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:23:08][351031123947269][5034 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-08-23 10:23:08][351031123947269][5034 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-08-23 10:23:08][351031123947269][5034 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:23:11][350572364911812][0 ms][INFO] === Request start === [2025-08-23 10:23:11][350572364911812][1 ms][DEBUG] START check_scloud [2025-08-23 10:23:11][350572364911812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:23:11][350572364911812][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 1077 20801 24512344 196688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:23:11][350572364911812][281 ms][DEBUG] targetPkg: running [2025-08-23 10:23:11][350572364911812][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-23 10:23:11][350572364911812][281 ms][DEBUG] START check_boot_completed [2025-08-23 10:23:11][350572364911812][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:23:11][350572364911812][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:23:11][350572364911812][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:23:11][350572364911812][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:23:11][350572364911812][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:23:11][350572364911812][390 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:23:11][350572364911812][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8715\"}'\'' -e'"" [2025-08-23 10:23:11][350572364911812][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:23:11][350572364911812][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8715\"}'\'' -e'"" [2025-08-23 10:23:15][350572364911812][4185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbaf0dc2-5340-4c3c-8847-a085a65b1a00","id":"QR_dbaf0dc2-5340-4c3c-8847-a085a65b1a00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:23:15][350572364911812][4342 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-23 10:23:15][350572364911812][4342 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 10:23:15][350572364911812][4342 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:23:17][351270418041368][0 ms][INFO] === Request start === [2025-08-23 10:23:17][351270418041368][1 ms][DEBUG] START check_scloud [2025-08-23 10:23:17][351270418041368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:23:18][351270418041368][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 1077 20801 24633432 201696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:23:18][351270418041368][278 ms][DEBUG] targetPkg: running [2025-08-23 10:23:18][351270418041368][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 10:23:18][351270418041368][278 ms][DEBUG] START check_boot_completed [2025-08-23 10:23:18][351270418041368][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:23:18][351270418041368][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:23:18][351270418041368][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:23:18][351270418041368][372 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 10:23:18][351270418041368][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:23:18][351270418041368][373 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:23:18][351270418041368][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418041368\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3066\"}'\'' -e'"" [2025-08-23 10:23:18][351270418041368][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:23:18][351270418041368][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418041368\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3066\"}'\'' -e'"" [2025-08-23 10:23:22][351270418041368][4449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1508268d-a85d-4a90-acb2-5b4e783f0263","id":"QR_1508268d-a85d-4a90-acb2-5b4e783f0263","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:23:22][351270418041368][4605 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-23 10:23:22][351270418041368][4605 ms][DEBUG] END runCmdUntilRes#1 in 4232 ms [2025-08-23 10:23:22][351270418041368][4605 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:25:03][357674435845012][1 ms][INFO] === Request start === [2025-08-23 10:25:03][357674435845012][2 ms][DEBUG] START check_scloud [2025-08-23 10:25:03][357674435845012][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:25:03][357674435845012][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 1077 20801 24754420 205028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:25:03][357674435845012][298 ms][DEBUG] targetPkg: running [2025-08-23 10:25:03][357674435845012][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 10:25:03][357674435845012][299 ms][DEBUG] START check_boot_completed [2025-08-23 10:25:03][357674435845012][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:25:03][357674435845012][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:25:03][357674435845012][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:25:04][357674435845012][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:25:04][357674435845012][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:25:04][357674435845012][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:25:04][357674435845012][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435845012\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-08-23 10:25:04][357674435845012][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:25:04][357674435845012][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435845012\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-08-23 10:25:08][357674435845012][4500 ms][DEBUG] proc_open done in 4093 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 10:25:08][357674435845012][4500 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-23 10:25:08][357674435845012][4500 ms][WARN] Detected error: Process with pid 1077 either refused to load frida-agent, or terminated during injection [2025-08-23 10:25:08][357674435845012][4500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 10:25:08][357674435845012][4657 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 10:25:08][357674435845012][4657 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 10:25:08][357674435845012][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:25:08][357674435845012][4797 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 10:25:08][357674435845012][4797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:25:08][357674435845012][4985 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 10:25:10][357674435845012][7000 ms][DEBUG] START check_boot_completed [2025-08-23 10:25:10][357674435845012][7000 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:25:10][357674435845012][7047 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:25:10][357674435845012][7047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:25:10][357674435845012][7125 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 10:25:10][357674435845012][7125 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 10:25:13][357674435845012][10139 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 10:25:13][357674435845012][10140 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435845012\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-08-23 10:25:18][357674435845012][14482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de7c09bd-f222-4f48-b7bd-f8ce295a15d7","id":"QR_de7c09bd-f222-4f48-b7bd-f8ce295a15d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:25:18][357674435845012][14639 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-23 10:25:18][357674435845012][14639 ms][DEBUG] END runCmdUntilRes#2 in 4499 ms [2025-08-23 10:25:18][357674435845012][14639 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:26:03][350077877385421][0 ms][INFO] === Request start === [2025-08-23 10:26:03][350077877385421][1 ms][DEBUG] START check_scloud [2025-08-23 10:26:03][350077877385421][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:26:03][350077877385421][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 3082 20801 23579532 128060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:26:03][350077877385421][297 ms][DEBUG] targetPkg: running [2025-08-23 10:26:03][350077877385421][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 10:26:03][350077877385421][297 ms][DEBUG] START check_boot_completed [2025-08-23 10:26:03][350077877385421][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:26:03][350077877385421][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:26:03][350077877385421][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:26:03][350077877385421][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:26:03][350077877385421][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:26:03][350077877385421][406 ms][DEBUG] START check_internet [2025-08-23 10:26:03][350077877385421][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.858/201.858/201.858/0.000 ms\n [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] check_internet: online [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] END check_internet in 594 ms [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:26:04][350077877385421][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350077877385421\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3637\"}'\'' -e'"" [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:26:04][350077877385421][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350077877385421\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3637\"}'\'' -e'"" [2025-08-23 10:26:08][350077877385421][5327 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4adb4cba-c6c9-4b00-95e9-e2f4ab6422b7","id":"QR_4adb4cba-c6c9-4b00-95e9-e2f4ab6422b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:26:08][350077877385421][5483 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-23 10:26:08][350077877385421][5483 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 10:26:08][350077877385421][5483 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:28:02][350938283840251][1 ms][INFO] === Request start === [2025-08-23 10:28:02][350938283840251][2 ms][DEBUG] START check_scloud [2025-08-23 10:28:02][350938283840251][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:28:03][350938283840251][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 3082 20801 23669092 138636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:28:03][350938283840251][313 ms][DEBUG] targetPkg: running [2025-08-23 10:28:03][350938283840251][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 10:28:03][350938283840251][313 ms][DEBUG] START check_boot_completed [2025-08-23 10:28:03][350938283840251][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:28:03][350938283840251][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:28:03][350938283840251][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:28:03][350938283840251][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:28:03][350938283840251][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:28:03][350938283840251][422 ms][DEBUG] START check_internet [2025-08-23 10:28:03][350938283840251][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:28:03][350938283840251][703 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.187/184.187/184.187/0.000 ms\n [2025-08-23 10:28:03][350938283840251][703 ms][DEBUG] check_internet: online [2025-08-23 10:28:03][350938283840251][703 ms][DEBUG] END check_internet in 281 ms [2025-08-23 10:28:03][350938283840251][704 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:28:03][350938283840251][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283840251\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3620\"}'\'' -e'"" [2025-08-23 10:28:03][350938283840251][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:28:03][350938283840251][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283840251\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3620\"}'\'' -e'"" [2025-08-23 10:28:08][350938283840251][5171 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fc7eba3-2239-47c1-8476-b6d76b37eced","id":"QR_3fc7eba3-2239-47c1-8476-b6d76b37eced","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:28:08][350938283840251][5327 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-23 10:28:08][350938283840251][5327 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-23 10:28:08][350938283840251][5327 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:28:10][351723303969481][0 ms][INFO] === Request start === [2025-08-23 10:28:10][351723303969481][1 ms][DEBUG] START check_scloud [2025-08-23 10:28:10][351723303969481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:28:11][351723303969481][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 3082 20801 23848236 145088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:28:11][351723303969481][296 ms][DEBUG] targetPkg: running [2025-08-23 10:28:11][351723303969481][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 10:28:11][351723303969481][296 ms][DEBUG] START check_boot_completed [2025-08-23 10:28:11][351723303969481][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:28:11][351723303969481][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:28:11][351723303969481][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:28:11][351723303969481][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:28:11][351723303969481][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:28:11][351723303969481][405 ms][DEBUG] START check_internet [2025-08-23 10:28:11][351723303969481][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.223/171.223/171.223/0.000 ms\n [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] check_internet: online [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] END check_internet in 312 ms [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:28:11][351723303969481][718 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723303969481\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:28:11][351723303969481][718 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723303969481\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-08-23 10:28:15][351723303969481][4529 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8668362e-7765-4e82-be90-cb6b80b9f711","id":"QR_8668362e-7765-4e82-be90-cb6b80b9f711","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:28:15][351723303969481][4685 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-23 10:28:15][351723303969481][4685 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 10:28:15][351723303969481][4685 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:29:03][350900920029797][0 ms][INFO] === Request start === [2025-08-23 10:29:03][350900920029797][1 ms][DEBUG] START check_scloud [2025-08-23 10:29:03][350900920029797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:29:03][350900920029797][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 3082 20801 23969252 158076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:29:03][350900920029797][256 ms][DEBUG] targetPkg: running [2025-08-23 10:29:03][350900920029797][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 10:29:03][350900920029797][256 ms][DEBUG] START check_boot_completed [2025-08-23 10:29:03][350900920029797][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:29:03][350900920029797][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:29:03][350900920029797][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:29:03][350900920029797][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:29:03][350900920029797][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:29:03][350900920029797][349 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:29:03][350900920029797][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900920029797\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8294\"}'\'' -e'"" [2025-08-23 10:29:03][350900920029797][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:29:03][350900920029797][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900920029797\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8294\"}'\'' -e'"" [2025-08-23 10:29:07][350900920029797][4442 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4286c44-c00a-4a4e-b0f8-b00cedc9b9a1","id":"QR_f4286c44-c00a-4a4e-b0f8-b00cedc9b9a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:29:07][350900920029797][4598 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 10:29:07][350900920029797][4598 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 10:29:07][350900920029797][4598 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:30:03][352857780652738][1 ms][INFO] === Request start === [2025-08-23 10:30:03][352857780652738][2 ms][DEBUG] START check_scloud [2025-08-23 10:30:03][352857780652738][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:30:03][352857780652738][251 ms][DEBUG] SU: done in 249 ms; outu0_a118 3082 20801 24117832 170016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:30:03][352857780652738][251 ms][DEBUG] targetPkg: running [2025-08-23 10:30:03][352857780652738][251 ms][DEBUG] END check_scloud in 249 ms [2025-08-23 10:30:03][352857780652738][251 ms][DEBUG] START check_boot_completed [2025-08-23 10:30:03][352857780652738][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:30:03][352857780652738][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:30:03][352857780652738][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:30:03][352857780652738][346 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 10:30:03][352857780652738][346 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 10:30:03][352857780652738][346 ms][DEBUG] START check_internet [2025-08-23 10:30:03][352857780652738][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:30:04][352857780652738][875 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.232/202.232/202.232/0.000 ms\n [2025-08-23 10:30:04][352857780652738][876 ms][DEBUG] check_internet: online [2025-08-23 10:30:04][352857780652738][876 ms][DEBUG] END check_internet in 529 ms [2025-08-23 10:30:04][352857780652738][876 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:30:04][352857780652738][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352857780652738\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5657\"}'\'' -e'"" [2025-08-23 10:30:04][352857780652738][876 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:30:04][352857780652738][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352857780652738\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5657\"}'\'' -e'"" [2025-08-23 10:30:08][352857780652738][5140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4868047a-00ad-4de6-93b4-c90f1d4beae2","id":"QR_4868047a-00ad-4de6-93b4-c90f1d4beae2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:30:08][352857780652738][5296 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-23 10:30:08][352857780652738][5296 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-23 10:30:08][352857780652738][5296 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:30:11][355255460525794][0 ms][INFO] === Request start === [2025-08-23 10:30:11][355255460525794][1 ms][DEBUG] START check_scloud [2025-08-23 10:30:11][355255460525794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:30:11][355255460525794][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 3082 20801 24252240 180992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:30:11][355255460525794][276 ms][DEBUG] targetPkg: running [2025-08-23 10:30:11][355255460525794][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 10:30:11][355255460525794][277 ms][DEBUG] START check_boot_completed [2025-08-23 10:30:11][355255460525794][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:30:11][355255460525794][323 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:30:11][355255460525794][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:30:11][355255460525794][401 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 10:30:11][355255460525794][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 10:30:11][355255460525794][401 ms][DEBUG] START check_internet [2025-08-23 10:30:11][355255460525794][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:30:11][355255460525794][776 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.553/217.553/217.553/0.000 ms\n [2025-08-23 10:30:11][355255460525794][776 ms][DEBUG] check_internet: online [2025-08-23 10:30:11][355255460525794][776 ms][DEBUG] END check_internet in 375 ms [2025-08-23 10:30:11][355255460525794][776 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:30:11][355255460525794][777 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460525794\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7968\"}'\'' -e'"" [2025-08-23 10:30:11][355255460525794][777 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:30:11][355255460525794][777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460525794\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7968\"}'\'' -e'"" [2025-08-23 10:30:15][355255460525794][4666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d1948c1-0b03-4d6f-a8e6-64e8594b0abb","id":"QR_8d1948c1-0b03-4d6f-a8e6-64e8594b0abb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:30:16][355255460525794][4822 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-23 10:30:16][355255460525794][4822 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-23 10:30:16][355255460525794][4822 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:36:03][351788411146371][1 ms][INFO] === Request start === [2025-08-23 10:36:03][351788411146371][2 ms][DEBUG] START check_scloud [2025-08-23 10:36:03][351788411146371][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:36:03][351788411146371][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 3082 20801 24390672 189536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:36:03][351788411146371][306 ms][DEBUG] targetPkg: running [2025-08-23 10:36:03][351788411146371][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 10:36:03][351788411146371][306 ms][DEBUG] START check_boot_completed [2025-08-23 10:36:03][351788411146371][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:36:03][351788411146371][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:36:03][351788411146371][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:36:04][351788411146371][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:36:04][351788411146371][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 10:36:04][351788411146371][385 ms][DEBUG] START check_internet [2025-08-23 10:36:04][351788411146371][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.506/200.506/200.506/0.000 ms\n [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] check_internet: online [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] END check_internet in 453 ms [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:36:04][351788411146371][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351788411146371\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3361\"}'\'' -e'"" [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:36:04][351788411146371][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351788411146371\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3361\"}'\'' -e'"" [2025-08-23 10:36:08][351788411146371][5290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b80ee986-26d1-4d32-be2f-8f5fb9adb476","id":"QR_b80ee986-26d1-4d32-be2f-8f5fb9adb476","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:36:09][351788411146371][5446 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-23 10:36:09][351788411146371][5446 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-23 10:36:09][351788411146371][5446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:37:03][353684144904749][0 ms][INFO] === Request start === [2025-08-23 10:37:03][353684144904749][1 ms][DEBUG] START check_scloud [2025-08-23 10:37:03][353684144904749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:37:03][353684144904749][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 3082 20801 24506612 200240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:37:03][353684144904749][313 ms][DEBUG] targetPkg: running [2025-08-23 10:37:03][353684144904749][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 10:37:03][353684144904749][313 ms][DEBUG] START check_boot_completed [2025-08-23 10:37:03][353684144904749][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:37:03][353684144904749][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:37:03][353684144904749][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:37:03][353684144904749][408 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 10:37:03][353684144904749][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 10:37:03][353684144904749][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:37:03][353684144904749][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144904749\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9862\"}'\'' -e'"" [2025-08-23 10:37:03][353684144904749][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:37:03][353684144904749][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144904749\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9862\"}'\'' -e'"" [2025-08-23 10:37:07][353684144904749][4562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47eb64bf-a9af-4e0d-b6b7-57ce8cf5c955","id":"QR_47eb64bf-a9af-4e0d-b6b7-57ce8cf5c955","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:37:08][353684144904749][4718 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-23 10:37:08][353684144904749][4718 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-23 10:37:08][353684144904749][4719 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:37:10][351351023458054][0 ms][INFO] === Request start === [2025-08-23 10:37:10][351351023458054][1 ms][DEBUG] START check_scloud [2025-08-23 10:37:10][351351023458054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:37:11][351351023458054][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3082 20801 24636732 209596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:37:11][351351023458054][304 ms][DEBUG] targetPkg: running [2025-08-23 10:37:11][351351023458054][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 10:37:11][351351023458054][304 ms][DEBUG] START check_boot_completed [2025-08-23 10:37:11][351351023458054][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:37:11][351351023458054][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:37:11][351351023458054][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:37:11][351351023458054][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:37:11][351351023458054][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:37:11][351351023458054][413 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:37:11][351351023458054][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023458054\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-08-23 10:37:11][351351023458054][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:37:11][351351023458054][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023458054\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-08-23 10:37:15][351351023458054][4662 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caca0846-848d-44f5-9787-26af9ccb4368","id":"QR_caca0846-848d-44f5-9787-26af9ccb4368","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:37:15][351351023458054][4818 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 10:37:15][351351023458054][4818 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 10:37:15][351351023458054][4818 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:38:03][350013886453306][0 ms][INFO] === Request start === [2025-08-23 10:38:03][350013886453306][1 ms][DEBUG] START check_scloud [2025-08-23 10:38:03][350013886453306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:38:03][350013886453306][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 3082 20801 24750268 219136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:38:03][350013886453306][318 ms][DEBUG] targetPkg: running [2025-08-23 10:38:03][350013886453306][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 10:38:03][350013886453306][318 ms][DEBUG] START check_boot_completed [2025-08-23 10:38:03][350013886453306][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:38:03][350013886453306][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:38:03][350013886453306][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:38:03][350013886453306][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:38:03][350013886453306][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:38:03][350013886453306][411 ms][DEBUG] START check_internet [2025-08-23 10:38:03][350013886453306][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:38:03][350013886453306][739 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.977/227.977/227.977/0.000 ms\n [2025-08-23 10:38:03][350013886453306][739 ms][DEBUG] check_internet: online [2025-08-23 10:38:03][350013886453306][739 ms][DEBUG] END check_internet in 328 ms [2025-08-23 10:38:03][350013886453306][739 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:38:03][350013886453306][739 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886453306\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7191\"}'\'' -e'"" [2025-08-23 10:38:03][350013886453306][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:38:03][350013886453306][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886453306\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7191\"}'\'' -e'"" [2025-08-23 10:38:08][350013886453306][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39e9f888-3090-4474-a022-af26a22e72bd","id":"QR_39e9f888-3090-4474-a022-af26a22e72bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:38:08][350013886453306][4972 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-23 10:38:08][350013886453306][4972 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 10:38:08][350013886453306][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:40:03][357953108355123][1 ms][INFO] === Request start === [2025-08-23 10:40:03][357953108355123][2 ms][DEBUG] START check_scloud [2025-08-23 10:40:03][357953108355123][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:40:04][357953108355123][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 3082 20801 24907172 212904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:40:04][357953108355123][266 ms][DEBUG] targetPkg: running [2025-08-23 10:40:04][357953108355123][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 10:40:04][357953108355123][266 ms][DEBUG] START check_boot_completed [2025-08-23 10:40:04][357953108355123][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:40:04][357953108355123][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:40:04][357953108355123][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:40:04][357953108355123][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:40:04][357953108355123][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:40:04][357953108355123][360 ms][DEBUG] START check_internet [2025-08-23 10:40:04][357953108355123][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:40:04][357953108355123][922 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.199/200.199/200.199/0.000 ms\n [2025-08-23 10:40:04][357953108355123][922 ms][DEBUG] check_internet: online [2025-08-23 10:40:04][357953108355123][923 ms][DEBUG] END check_internet in 563 ms [2025-08-23 10:40:04][357953108355123][923 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:40:04][357953108355123][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357953108355123\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TCL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-23 10:40:04][357953108355123][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:40:04][357953108355123][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357953108355123\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TCL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-23 10:40:08][357953108355123][4968 ms][DEBUG] proc_open done in 4045 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 10:40:08][357953108355123][4968 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-23 10:40:08][357953108355123][4969 ms][WARN] Detected error: Process with pid 3082 either refused to load frida-agent, or terminated during injection [2025-08-23 10:40:08][357953108355123][4969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 10:40:09][357953108355123][5140 ms][DEBUG] SU: done in 171 ms; out [2025-08-23 10:40:09][357953108355123][5140 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 10:40:09][357953108355123][5140 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:40:09][357953108355123][5281 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 10:40:09][357953108355123][5281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:40:09][357953108355123][5453 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 10:40:11][357953108355123][7467 ms][DEBUG] START check_boot_completed [2025-08-23 10:40:11][357953108355123][7468 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:40:11][357953108355123][7515 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:40:11][357953108355123][7515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:40:11][357953108355123][7577 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:40:11][357953108355123][7577 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:40:14][357953108355123][10592 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 10:40:14][357953108355123][10592 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357953108355123\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TCL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-23 10:40:18][357953108355123][14872 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be96d58c-d555-42f1-b0f9-40c6fa3bfadf","id":"QR_be96d58c-d555-42f1-b0f9-40c6fa3bfadf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:40:18][357953108355123][15028 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 10:40:18][357953108355123][15028 ms][DEBUG] END runCmdUntilRes#2 in 4437 ms [2025-08-23 10:40:18][357953108355123][15028 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:42:05][359253133902538][1 ms][INFO] === Request start === [2025-08-23 10:42:05][359253133902538][2 ms][DEBUG] START check_scloud [2025-08-23 10:42:05][359253133902538][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:42:05][359253133902538][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 5608 20801 23474452 128064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:42:05][359253133902538][315 ms][DEBUG] targetPkg: running [2025-08-23 10:42:05][359253133902538][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 10:42:05][359253133902538][315 ms][DEBUG] START check_boot_completed [2025-08-23 10:42:05][359253133902538][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:42:05][359253133902538][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:42:05][359253133902538][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:42:05][359253133902538][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:42:05][359253133902538][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:42:05][359253133902538][409 ms][DEBUG] START check_internet [2025-08-23 10:42:05][359253133902538][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:42:05][359253133902538][768 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.649/252.649/252.649/0.000 ms\n [2025-08-23 10:42:05][359253133902538][769 ms][DEBUG] check_internet: online [2025-08-23 10:42:05][359253133902538][769 ms][DEBUG] END check_internet in 360 ms [2025-08-23 10:42:05][359253133902538][769 ms][DEBUG] rawBody.length=1158 [2025-08-23 10:42:05][359253133902538][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359253133902538\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X702GQEZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-23 10:42:05][359253133902538][769 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:42:05][359253133902538][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359253133902538\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X702GQEZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-23 10:42:10][359253133902538][4986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9674609-3988-4630-bafd-06f0270d521a","id":"QR_b9674609-3988-4630-bafd-06f0270d521a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:42:10][359253133902538][5142 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 10:42:10][359253133902538][5142 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 10:42:10][359253133902538][5142 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:43:03][352773711760161][0 ms][INFO] === Request start === [2025-08-23 10:43:03][352773711760161][1 ms][DEBUG] START check_scloud [2025-08-23 10:43:03][352773711760161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:43:03][352773711760161][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 5608 20801 23619820 139404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:43:03][352773711760161][322 ms][DEBUG] targetPkg: running [2025-08-23 10:43:03][352773711760161][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 10:43:03][352773711760161][322 ms][DEBUG] START check_boot_completed [2025-08-23 10:43:03][352773711760161][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:43:03][352773711760161][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:43:03][352773711760161][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:43:03][352773711760161][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:43:03][352773711760161][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:43:03][352773711760161][416 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:43:03][352773711760161][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711760161\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8466\"}'\'' -e'"" [2025-08-23 10:43:03][352773711760161][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:43:03][352773711760161][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711760161\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8466\"}'\'' -e'"" [2025-08-23 10:43:07][352773711760161][4665 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d835cbab-ddea-4db3-b23e-0cef886cb8f9","id":"QR_d835cbab-ddea-4db3-b23e-0cef886cb8f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:43:08][352773711760161][4821 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-23 10:43:08][352773711760161][4821 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-08-23 10:43:08][352773711760161][4821 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:50:03][352677530680676][1 ms][INFO] === Request start === [2025-08-23 10:50:03][352677530680676][2 ms][DEBUG] START check_scloud [2025-08-23 10:50:03][352677530680676][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:50:04][352677530680676][283 ms][DEBUG] SU: done in 281 ms; outu0_a118 5608 20801 23799000 151340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:50:04][352677530680676][283 ms][DEBUG] targetPkg: running [2025-08-23 10:50:04][352677530680676][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 10:50:04][352677530680676][283 ms][DEBUG] START check_boot_completed [2025-08-23 10:50:04][352677530680676][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:50:04][352677530680676][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:50:04][352677530680676][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:50:04][352677530680676][377 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:50:04][352677530680676][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 10:50:04][352677530680676][377 ms][DEBUG] START check_internet [2025-08-23 10:50:04][352677530680676][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:50:04][352677530680676][876 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.787/202.787/202.787/0.000 ms\n [2025-08-23 10:50:04][352677530680676][876 ms][DEBUG] check_internet: online [2025-08-23 10:50:04][352677530680676][876 ms][DEBUG] END check_internet in 500 ms [2025-08-23 10:50:04][352677530680676][877 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:50:04][352677530680676][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530680676\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-08-23 10:50:04][352677530680676][877 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:50:04][352677530680676][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530680676\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-08-23 10:50:13][352677530680676][10124 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46f704b4-932e-4f19-a2ad-01813ccb83bf","id":"QR_46f704b4-932e-4f19-a2ad-01813ccb83bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:50:14][352677530680676][10280 ms][DEBUG] proc_open done in 9404 ms; code=255; res.len=3343 [2025-08-23 10:50:14][352677530680676][10280 ms][DEBUG] END runCmdUntilRes#1 in 9404 ms [2025-08-23 10:50:14][352677530680676][10280 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:52:03][355360450354088][1 ms][INFO] === Request start === [2025-08-23 10:52:03][355360450354088][1 ms][DEBUG] START check_scloud [2025-08-23 10:52:03][355360450354088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:52:04][355360450354088][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 5608 20801 23920008 162164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:52:04][355360450354088][268 ms][DEBUG] targetPkg: running [2025-08-23 10:52:04][355360450354088][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 10:52:04][355360450354088][268 ms][DEBUG] START check_boot_completed [2025-08-23 10:52:04][355360450354088][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:52:04][355360450354088][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:52:04][355360450354088][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:52:04][355360450354088][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:52:04][355360450354088][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:52:04][355360450354088][377 ms][DEBUG] START check_internet [2025-08-23 10:52:04][355360450354088][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:52:04][355360450354088][721 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.362/209.362/209.362/0.000 ms\n [2025-08-23 10:52:04][355360450354088][721 ms][DEBUG] check_internet: online [2025-08-23 10:52:04][355360450354088][721 ms][DEBUG] END check_internet in 344 ms [2025-08-23 10:52:04][355360450354088][721 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:52:04][355360450354088][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355360450354088\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-23 10:52:04][355360450354088][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:52:04][355360450354088][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355360450354088\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-23 10:52:08][355360450354088][5064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e7d4852-38cc-485a-823c-dd53f69a10c8","id":"QR_5e7d4852-38cc-485a-823c-dd53f69a10c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:52:08][355360450354088][5220 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-23 10:52:08][355360450354088][5220 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-23 10:52:08][355360450354088][5220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:52:11][352397451964575][1 ms][INFO] === Request start === [2025-08-23 10:52:11][352397451964575][2 ms][DEBUG] START check_scloud [2025-08-23 10:52:11][352397451964575][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:52:11][352397451964575][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 5608 20801 24059400 172708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:52:11][352397451964575][284 ms][DEBUG] targetPkg: running [2025-08-23 10:52:11][352397451964575][284 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 10:52:11][352397451964575][284 ms][DEBUG] START check_boot_completed [2025-08-23 10:52:11][352397451964575][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:52:11][352397451964575][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:52:11][352397451964575][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:52:11][352397451964575][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:52:11][352397451964575][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:52:11][352397451964575][393 ms][DEBUG] START check_internet [2025-08-23 10:52:11][352397451964575][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:52:12][352397451964575][658 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.832/134.832/134.832/0.000 ms\n [2025-08-23 10:52:12][352397451964575][659 ms][DEBUG] check_internet: online [2025-08-23 10:52:12][352397451964575][659 ms][DEBUG] END check_internet in 266 ms [2025-08-23 10:52:12][352397451964575][659 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:52:12][352397451964575][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451964575\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9559\"}'\'' -e'"" [2025-08-23 10:52:12][352397451964575][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:52:12][352397451964575][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451964575\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9559\"}'\'' -e'"" [2025-08-23 10:52:16][352397451964575][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_167d7bac-0675-4982-a958-8f321953e79f","id":"QR_167d7bac-0675-4982-a958-8f321953e79f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:52:16][352397451964575][4798 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 10:52:16][352397451964575][4798 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 10:52:16][352397451964575][4798 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:52:18][354626224129860][0 ms][INFO] === Request start === [2025-08-23 10:52:18][354626224129860][1 ms][DEBUG] START check_scloud [2025-08-23 10:52:18][354626224129860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:52:19][354626224129860][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 5608 20801 24232720 184544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:52:19][354626224129860][295 ms][DEBUG] targetPkg: running [2025-08-23 10:52:19][354626224129860][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 10:52:19][354626224129860][295 ms][DEBUG] START check_boot_completed [2025-08-23 10:52:19][354626224129860][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:52:19][354626224129860][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:52:19][354626224129860][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:52:19][354626224129860][420 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 10:52:19][354626224129860][420 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 10:52:19][354626224129860][420 ms][DEBUG] START check_internet [2025-08-23 10:52:19][354626224129860][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:52:19][354626224129860][779 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.886/210.886/210.886/0.000 ms\n [2025-08-23 10:52:19][354626224129860][780 ms][DEBUG] check_internet: online [2025-08-23 10:52:19][354626224129860][780 ms][DEBUG] END check_internet in 359 ms [2025-08-23 10:52:19][354626224129860][780 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:52:19][354626224129860][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626224129860\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-23 10:52:19][354626224129860][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:52:19][354626224129860][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626224129860\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-23 10:52:23][354626224129860][4825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92bbaace-32d3-4ae1-b530-62b68706997e","id":"QR_92bbaace-32d3-4ae1-b530-62b68706997e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:52:23][354626224129860][4981 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 10:52:23][354626224129860][4981 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 10:52:23][354626224129860][4982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:53:03][352566276766049][0 ms][INFO] === Request start === [2025-08-23 10:53:03][352566276766049][1 ms][DEBUG] START check_scloud [2025-08-23 10:53:03][352566276766049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:53:03][352566276766049][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 5608 20801 24323820 195620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:53:03][352566276766049][265 ms][DEBUG] targetPkg: running [2025-08-23 10:53:03][352566276766049][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-23 10:53:03][352566276766049][265 ms][DEBUG] START check_boot_completed [2025-08-23 10:53:03][352566276766049][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:53:03][352566276766049][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 10:53:03][352566276766049][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:53:03][352566276766049][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:53:03][352566276766049][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 10:53:03][352566276766049][358 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:53:03][352566276766049][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566276766049\",\"model\":\"SM-A236B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2839\"}'\'' -e'"" [2025-08-23 10:53:03][352566276766049][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:53:03][352566276766049][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566276766049\",\"model\":\"SM-A236B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2839\"}'\'' -e'"" [2025-08-23 10:53:07][352566276766049][4450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22756050-204d-4e3d-9ee8-485d1deec5d5","id":"QR_22756050-204d-4e3d-9ee8-485d1deec5d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:53:08][352566276766049][4607 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 10:53:08][352566276766049][4607 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 10:53:08][352566276766049][4607 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:54:02][353521961555586][1 ms][INFO] === Request start === [2025-08-23 10:54:02][353521961555586][2 ms][DEBUG] START check_scloud [2025-08-23 10:54:02][353521961555586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:54:03][353521961555586][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 5608 20801 24445776 207480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:54:03][353521961555586][315 ms][DEBUG] targetPkg: running [2025-08-23 10:54:03][353521961555586][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 10:54:03][353521961555586][315 ms][DEBUG] START check_boot_completed [2025-08-23 10:54:03][353521961555586][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:54:03][353521961555586][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:54:03][353521961555586][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:54:03][353521961555586][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 10:54:03][353521961555586][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 10:54:03][353521961555586][410 ms][DEBUG] START check_internet [2025-08-23 10:54:03][353521961555586][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:54:03][353521961555586][768 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.331/232.331/232.331/0.000 ms\n [2025-08-23 10:54:03][353521961555586][768 ms][DEBUG] check_internet: online [2025-08-23 10:54:03][353521961555586][768 ms][DEBUG] END check_internet in 358 ms [2025-08-23 10:54:03][353521961555586][768 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:54:03][353521961555586][768 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353521961555586\",\"model\":\"SM-E546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7719\"}'\'' -e'"" [2025-08-23 10:54:03][353521961555586][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:54:03][353521961555586][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353521961555586\",\"model\":\"SM-E546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7719\"}'\'' -e'"" [2025-08-23 10:54:08][353521961555586][5095 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48f2a721-80d1-4a90-9102-f654ddc8e797","id":"QR_48f2a721-80d1-4a90-9102-f654ddc8e797","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:54:08][353521961555586][5251 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-23 10:54:08][353521961555586][5251 ms][DEBUG] END runCmdUntilRes#1 in 4482 ms [2025-08-23 10:54:08][353521961555586][5251 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:55:03][355705440779218][1 ms][INFO] === Request start === [2025-08-23 10:55:03][355705440779218][2 ms][DEBUG] START check_scloud [2025-08-23 10:55:03][355705440779218][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:55:04][355705440779218][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 5608 20801 24586164 218188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:55:04][355705440779218][300 ms][DEBUG] targetPkg: running [2025-08-23 10:55:04][355705440779218][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 10:55:04][355705440779218][300 ms][DEBUG] START check_boot_completed [2025-08-23 10:55:04][355705440779218][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:55:04][355705440779218][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:55:04][355705440779218][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:55:04][355705440779218][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:55:04][355705440779218][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:55:04][355705440779218][410 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:55:04][355705440779218][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355705440779218\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3638\"}'\'' -e'"" [2025-08-23 10:55:04][355705440779218][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:55:04][355705440779218][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355705440779218\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3638\"}'\'' -e'"" [2025-08-23 10:55:08][355705440779218][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98417756-c9e0-4543-8d59-67c8777ec623","id":"QR_98417756-c9e0-4543-8d59-67c8777ec623","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:55:08][355705440779218][4799 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 10:55:08][355705440779218][4799 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 10:55:08][355705440779218][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:56:02][350246950302583][1 ms][INFO] === Request start === [2025-08-23 10:56:02][350246950302583][2 ms][DEBUG] START check_scloud [2025-08-23 10:56:02][350246950302583][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:56:03][350246950302583][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 5608 20801 24751260 225608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:56:03][350246950302583][298 ms][DEBUG] targetPkg: running [2025-08-23 10:56:03][350246950302583][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 10:56:03][350246950302583][298 ms][DEBUG] START check_boot_completed [2025-08-23 10:56:03][350246950302583][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:56:03][350246950302583][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:56:03][350246950302583][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:56:03][350246950302583][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:56:03][350246950302583][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 10:56:03][350246950302583][376 ms][DEBUG] START check_internet [2025-08-23 10:56:03][350246950302583][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] SU: done in 424 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.801/200.801/200.801/0.000 ms\n [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] check_internet: online [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] END check_internet in 424 ms [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:56:03][350246950302583][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246950302583\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:56:03][350246950302583][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246950302583\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-08-23 10:56:07][350246950302583][4984 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cf5357d-203a-4b5e-80b3-441a833c736d","id":"QR_0cf5357d-203a-4b5e-80b3-441a833c736d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:56:07][350246950302583][5140 ms][DEBUG] proc_open done in 4340 ms; code=255; res.len=3343 [2025-08-23 10:56:07][350246950302583][5140 ms][DEBUG] END runCmdUntilRes#1 in 4340 ms [2025-08-23 10:56:07][350246950302583][5140 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:56:10][353310804296743][0 ms][INFO] === Request start === [2025-08-23 10:56:10][353310804296743][1 ms][DEBUG] START check_scloud [2025-08-23 10:56:10][353310804296743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:56:11][353310804296743][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 5608 20801 24887716 236552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:56:11][353310804296743][276 ms][DEBUG] targetPkg: running [2025-08-23 10:56:11][353310804296743][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 10:56:11][353310804296743][276 ms][DEBUG] START check_boot_completed [2025-08-23 10:56:11][353310804296743][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:56:11][353310804296743][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 10:56:11][353310804296743][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:56:11][353310804296743][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 10:56:11][353310804296743][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 10:56:11][353310804296743][355 ms][DEBUG] START check_internet [2025-08-23 10:56:11][353310804296743][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:56:11][353310804296743][667 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.786/181.786/181.786/0.000 ms\n [2025-08-23 10:56:11][353310804296743][667 ms][DEBUG] check_internet: online [2025-08-23 10:56:11][353310804296743][667 ms][DEBUG] END check_internet in 313 ms [2025-08-23 10:56:11][353310804296743][667 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:56:11][353310804296743][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-08-23 10:56:11][353310804296743][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:56:11][353310804296743][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-08-23 10:56:15][353310804296743][4760 ms][DEBUG] proc_open done in 4092 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 10:56:15][353310804296743][4760 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-23 10:56:15][353310804296743][4760 ms][WARN] Detected error: Process with pid 5608 either refused to load frida-agent, or terminated during injection [2025-08-23 10:56:15][353310804296743][4760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 10:56:15][353310804296743][4900 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 10:56:15][353310804296743][4900 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 10:56:15][353310804296743][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:56:15][353310804296743][5056 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 10:56:15][353310804296743][5057 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:56:19][353310804296743][8774 ms][DEBUG] SU: done in 3718 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\ncmd: Failure calling service activity: Broken pipe (32)\n [2025-08-23 10:56:21][353310804296743][10789 ms][DEBUG] START check_boot_completed [2025-08-23 10:56:21][353310804296743][10789 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:56:21][353310804296743][10836 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:56:21][353310804296743][10836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:56:21][353310804296743][10899 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:56:21][353310804296743][10899 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:56:24][353310804296743][13914 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 10:56:24][353310804296743][13914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-08-23 10:56:27][353310804296743][16476 ms][DEBUG] proc_open done in 2562 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 10:56:27][353310804296743][16476 ms][DEBUG] END runCmdUntilRes#2 in 2562 ms [2025-08-23 10:56:27][353310804296743][16476 ms][WARN] Detected error 2; Reboot the device [2025-08-23 10:56:27][353310804296743][16476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 10:56:27][353310804296743][17116 ms][DEBUG] SU: done in 640 ms; out [2025-08-23 10:57:03][353310804296743][0 ms][INFO] === Request start === [2025-08-23 10:57:03][353310804296743][1 ms][DEBUG] START check_scloud [2025-08-23 10:57:03][353310804296743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:57:03][353310804296743][43 ms][DEBUG] SU: done in 41 ms; out [2025-08-23 10:57:03][353310804296743][43 ms][WARN] targetPkg: not running, restarting [2025-08-23 10:57:03][353310804296743][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:57:03][353310804296743][74 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 10:57:03][353310804296743][74 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:57:03][353310804296743][105 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 10:57:05][353310804296743][2120 ms][DEBUG] END check_scloud in 2119 ms [2025-08-23 10:57:05][353310804296743][2120 ms][DEBUG] START check_boot_completed [2025-08-23 10:57:05][353310804296743][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:57:28][353310804296743][25490 ms][DEBUG] ADB: done in 23370 ms; out [2025-08-23 10:57:28][353310804296743][25490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:57:28][353310804296743][25553 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:57:28][353310804296743][25553 ms][DEBUG] END check_boot_completed in 23433 ms [2025-08-23 10:57:28][353310804296743][25553 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:57:28][353310804296743][25553 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5295\"}'\'' -e'"" [2025-08-23 10:57:28][353310804296743][25553 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:57:28][353310804296743][25553 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5295\"}'\'' -e'"" [2025-08-23 10:57:31][353310804296743][28286 ms][DEBUG] proc_open done in 2733 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 10:57:31][353310804296743][28287 ms][DEBUG] END runCmdUntilRes#1 in 2734 ms [2025-08-23 10:57:31][353310804296743][28287 ms][WARN] Detected error: Process not found [2025-08-23 10:57:31][353310804296743][28287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 10:57:31][353310804296743][28443 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 10:57:31][353310804296743][28443 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 10:57:31][353310804296743][28443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:57:31][353310804296743][28552 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 10:57:31][353310804296743][28552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:57:31][353310804296743][28583 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 10:57:33][353310804296743][30588 ms][DEBUG] START check_boot_completed [2025-08-23 10:57:33][353310804296743][30589 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:57:34][353310804296743][30635 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:57:34][353310804296743][30635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:57:34][353310804296743][30698 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 10:57:34][353310804296743][30698 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 10:57:37][353310804296743][33713 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 10:57:37][353310804296743][33713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5295\"}'\'' -e'"" [2025-08-23 10:57:41][353310804296743][38368 ms][DEBUG] proc_open done in 4655 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 10:57:41][353310804296743][38368 ms][DEBUG] END runCmdUntilRes#2 in 4656 ms [2025-08-23 10:57:41][353310804296743][38368 ms][WARN] Detected error 2; Reboot the device [2025-08-23 10:57:41][353310804296743][38368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 10:58:03][353310804296743][1 ms][INFO] === Request start === [2025-08-23 10:58:03][353310804296743][2 ms][DEBUG] START check_scloud [2025-08-23 10:58:03][353310804296743][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:58:03][353310804296743][39 ms][DEBUG] SU: done in 37 ms; out [2025-08-23 10:58:03][353310804296743][39 ms][WARN] targetPkg: not running, restarting [2025-08-23 10:58:03][353310804296743][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:58:03][353310804296743][70 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 10:58:03][353310804296743][70 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:58:03][353310804296743][101 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 10:58:05][353310804296743][2116 ms][DEBUG] END check_scloud in 2115 ms [2025-08-23 10:58:05][353310804296743][2116 ms][DEBUG] START check_boot_completed [2025-08-23 10:58:05][353310804296743][2117 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:58:42][353310804296743][39732 ms][DEBUG] ADB: done in 37616 ms; out [2025-08-23 10:58:42][353310804296743][39732 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:58:43][353310804296743][39826 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 10:58:43][353310804296743][39826 ms][DEBUG] END check_boot_completed in 37710 ms [2025-08-23 10:58:43][353310804296743][39826 ms][DEBUG] START check_internet [2025-08-23 10:58:43][353310804296743][39826 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 10:58:43][353310804296743][39951 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 10:58:43][353310804296743][39951 ms][WARN] check_internet: offline [2025-08-23 10:58:43][353310804296743][39951 ms][DEBUG] END check_internet in 125 ms [2025-08-23 10:59:02][353310804296743][0 ms][INFO] === Request start === [2025-08-23 10:59:02][353310804296743][1 ms][DEBUG] START check_scloud [2025-08-23 10:59:02][353310804296743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:59:03][353310804296743][456 ms][DEBUG] SU: done in 455 ms; out [2025-08-23 10:59:03][353310804296743][456 ms][WARN] targetPkg: not running, restarting [2025-08-23 10:59:03][353310804296743][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:59:03][353310804296743][626 ms][DEBUG] SU: done in 170 ms; out [2025-08-23 10:59:03][353310804296743][626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:59:03][353310804296743][845 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 10:59:05][353310804296743][2859 ms][DEBUG] END check_scloud in 2858 ms [2025-08-23 10:59:05][353310804296743][2860 ms][DEBUG] START check_boot_completed [2025-08-23 10:59:05][353310804296743][2860 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:59:05][353310804296743][2906 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:59:05][353310804296743][2906 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:59:05][353310804296743][2969 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:59:05][353310804296743][2969 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:59:05][353310804296743][2969 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:59:05][353310804296743][2969 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7011\"}'\'' -e'"" [2025-08-23 10:59:05][353310804296743][2969 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:59:05][353310804296743][2969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804296743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7011\"}'\'' -e'"" [2025-08-23 10:59:12][353310804296743][9342 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_619d2e5f-7953-4d2a-9659-561dbb8b2f8e","id":"QR_619d2e5f-7953-4d2a-9659-561dbb8b2f8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:59:12][353310804296743][9499 ms][DEBUG] proc_open done in 6530 ms; code=255; res.len=3343 [2025-08-23 10:59:12][353310804296743][9499 ms][DEBUG] END runCmdUntilRes#1 in 6530 ms [2025-08-23 10:59:12][353310804296743][9499 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:59:15][351708814826510][0 ms][INFO] === Request start === [2025-08-23 10:59:15][351708814826510][1 ms][DEBUG] START check_scloud [2025-08-23 10:59:15][351708814826510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:59:15][351708814826510][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 9666 4968 23752628 104756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 10:59:15][351708814826510][329 ms][DEBUG] targetPkg: running [2025-08-23 10:59:15][351708814826510][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-23 10:59:15][351708814826510][329 ms][DEBUG] START check_boot_completed [2025-08-23 10:59:15][351708814826510][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:59:15][351708814826510][376 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:59:15][351708814826510][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:59:15][351708814826510][438 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 10:59:15][351708814826510][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 10:59:15][351708814826510][438 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:59:15][351708814826510][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351708814826510\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7372\"}'\'' -e'"" [2025-08-23 10:59:15][351708814826510][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:59:15][351708814826510][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351708814826510\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7372\"}'\'' -e'"" [2025-08-23 10:59:19][351708814826510][4656 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dc0b4e2-13be-4e49-bd2c-23b21c498e0a","id":"QR_8dc0b4e2-13be-4e49-bd2c-23b21c498e0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:59:19][351708814826510][4812 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 10:59:19][351708814826510][4812 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 10:59:19][351708814826510][4812 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 10:59:22][350938282540795][0 ms][INFO] === Request start === [2025-08-23 10:59:22][350938282540795][1 ms][DEBUG] START check_scloud [2025-08-23 10:59:22][350938282540795][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 10:59:22][350938282540795][347 ms][DEBUG] SU: done in 346 ms; out [2025-08-23 10:59:22][350938282540795][347 ms][WARN] targetPkg: not running, restarting [2025-08-23 10:59:22][350938282540795][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 10:59:22][350938282540795][488 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 10:59:22][350938282540795][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 10:59:23][350938282540795][706 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 10:59:25][350938282540795][2721 ms][DEBUG] END check_scloud in 2720 ms [2025-08-23 10:59:25][350938282540795][2721 ms][DEBUG] START check_boot_completed [2025-08-23 10:59:25][350938282540795][2721 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 10:59:25][350938282540795][2768 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 10:59:25][350938282540795][2768 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 10:59:25][350938282540795][2862 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 10:59:25][350938282540795][2862 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 10:59:25][350938282540795][2862 ms][DEBUG] rawBody.length=1148 [2025-08-23 10:59:25][350938282540795][2862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282540795\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1935\"}'\'' -e'"" [2025-08-23 10:59:25][350938282540795][2862 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 10:59:25][350938282540795][2862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282540795\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1935\"}'\'' -e'"" [2025-08-23 10:59:30][350938282540795][8595 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea0f9706-7502-4b2f-bba2-13ab81b7a952","id":"QR_ea0f9706-7502-4b2f-bba2-13ab81b7a952","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 10:59:31][350938282540795][8751 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-08-23 10:59:31][350938282540795][8751 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-08-23 10:59:31][350938282540795][8751 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:05:03][351240642312448][1 ms][INFO] === Request start === [2025-08-23 11:05:03][351240642312448][2 ms][DEBUG] START check_scloud [2025-08-23 11:05:03][351240642312448][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:05:04][351240642312448][347 ms][DEBUG] SU: done in 345 ms; outu0_a118 11915 4968 23694624 77020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:05:04][351240642312448][347 ms][DEBUG] targetPkg: running [2025-08-23 11:05:04][351240642312448][347 ms][DEBUG] END check_scloud in 345 ms [2025-08-23 11:05:04][351240642312448][347 ms][DEBUG] START check_boot_completed [2025-08-23 11:05:04][351240642312448][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:05:04][351240642312448][378 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:05:04][351240642312448][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:05:04][351240642312448][425 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:05:04][351240642312448][425 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:05:04][351240642312448][425 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:05:04][351240642312448][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642312448\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4568\"}'\'' -e'"" [2025-08-23 11:05:04][351240642312448][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:05:04][351240642312448][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642312448\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4568\"}'\'' -e'"" [2025-08-23 11:05:09][351240642312448][5377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07423b71-aead-482d-af79-afa3c57d50f7","id":"QR_07423b71-aead-482d-af79-afa3c57d50f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:05:09][351240642312448][5533 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-23 11:05:09][351240642312448][5533 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-23 11:05:09][351240642312448][5533 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:06:03][350013886220333][0 ms][INFO] === Request start === [2025-08-23 11:06:03][350013886220333][1 ms][DEBUG] START check_scloud [2025-08-23 11:06:03][350013886220333][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:06:03][350013886220333][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11915 4968 23838724 89260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:06:03][350013886220333][323 ms][DEBUG] targetPkg: running [2025-08-23 11:06:03][350013886220333][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 11:06:03][350013886220333][323 ms][DEBUG] START check_boot_completed [2025-08-23 11:06:03][350013886220333][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:06:03][350013886220333][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:06:03][350013886220333][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:06:03][350013886220333][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:06:03][350013886220333][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:06:03][350013886220333][417 ms][DEBUG] START check_internet [2025-08-23 11:06:03][350013886220333][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.189/202.189/202.189/0.000 ms\n [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] check_internet: online [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] END check_internet in 578 ms [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:06:04][350013886220333][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886220333\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1697\"}'\'' -e'"" [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:06:04][350013886220333][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886220333\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1697\"}'\'' -e'"" [2025-08-23 11:06:08][350013886220333][5118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e8c76d8-83ce-41e9-bb34-2848047363f3","id":"QR_5e8c76d8-83ce-41e9-bb34-2848047363f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:06:08][350013886220333][5275 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 11:06:08][350013886220333][5275 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 11:06:08][350013886220333][5275 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:10:05][354052432290834][1 ms][INFO] === Request start === [2025-08-23 11:10:05][354052432290834][2 ms][DEBUG] START check_scloud [2025-08-23 11:10:05][354052432290834][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:10:05][354052432290834][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 11915 4968 24001768 101472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:10:05][354052432290834][306 ms][DEBUG] targetPkg: running [2025-08-23 11:10:05][354052432290834][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 11:10:05][354052432290834][306 ms][DEBUG] START check_boot_completed [2025-08-23 11:10:05][354052432290834][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:10:05][354052432290834][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:10:05][354052432290834][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:10:05][354052432290834][431 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 11:10:05][354052432290834][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 11:10:05][354052432290834][431 ms][DEBUG] START check_internet [2025-08-23 11:10:05][354052432290834][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:10:06][354052432290834][930 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.861/202.861/202.861/0.000 ms\n [2025-08-23 11:10:06][354052432290834][931 ms][DEBUG] check_internet: online [2025-08-23 11:10:06][354052432290834][931 ms][DEBUG] END check_internet in 500 ms [2025-08-23 11:10:06][354052432290834][931 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:10:06][354052432290834][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354052432290834\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7907\"}'\'' -e'"" [2025-08-23 11:10:06][354052432290834][931 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:10:06][354052432290834][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354052432290834\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7907\"}'\'' -e'"" [2025-08-23 11:10:11][354052432290834][6491 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd2f9188-dad2-4a6e-9ff4-5867ab75c64e","id":"QR_bd2f9188-dad2-4a6e-9ff4-5867ab75c64e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:10:11][354052432290834][6648 ms][DEBUG] proc_open done in 5716 ms; code=255; res.len=3343 [2025-08-23 11:10:11][354052432290834][6648 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-23 11:10:11][354052432290834][6648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:11:02][350952831767916][1 ms][INFO] === Request start === [2025-08-23 11:11:02][350952831767916][2 ms][DEBUG] START check_scloud [2025-08-23 11:11:02][350952831767916][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:11:03][350952831767916][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 11915 4968 24166540 111548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:11:03][350952831767916][309 ms][DEBUG] targetPkg: running [2025-08-23 11:11:03][350952831767916][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 11:11:03][350952831767916][309 ms][DEBUG] START check_boot_completed [2025-08-23 11:11:03][350952831767916][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:11:03][350952831767916][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 11:11:03][350952831767916][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:11:03][350952831767916][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:11:03][350952831767916][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 11:11:03][350952831767916][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:11:03][350952831767916][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350952831767916\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9170\"}'\'' -e'"" [2025-08-23 11:11:03][350952831767916][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:11:03][350952831767916][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350952831767916\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9170\"}'\'' -e'"" [2025-08-23 11:11:07][350952831767916][4524 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3562aa79-6507-40ea-b9b0-00177ab4e757","id":"QR_3562aa79-6507-40ea-b9b0-00177ab4e757","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:11:07][350952831767916][4680 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 11:11:07][350952831767916][4680 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 11:11:07][350952831767916][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:12:03][350331803557417][0 ms][INFO] === Request start === [2025-08-23 11:12:03][350331803557417][1 ms][DEBUG] START check_scloud [2025-08-23 11:12:03][350331803557417][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:12:04][350331803557417][324 ms][DEBUG] SU: done in 322 ms; outu0_a118 11915 4968 24286576 123220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:12:04][350331803557417][324 ms][DEBUG] targetPkg: running [2025-08-23 11:12:04][350331803557417][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-23 11:12:04][350331803557417][324 ms][DEBUG] START check_boot_completed [2025-08-23 11:12:04][350331803557417][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:12:04][350331803557417][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:12:04][350331803557417][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:12:04][350331803557417][433 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:12:04][350331803557417][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:12:04][350331803557417][433 ms][DEBUG] START check_internet [2025-08-23 11:12:04][350331803557417][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:12:04][350331803557417][745 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.250/181.250/181.250/0.000 ms\n [2025-08-23 11:12:04][350331803557417][746 ms][DEBUG] check_internet: online [2025-08-23 11:12:04][350331803557417][746 ms][DEBUG] END check_internet in 312 ms [2025-08-23 11:12:04][350331803557417][746 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:12:04][350331803557417][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331803557417\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-23 11:12:04][350331803557417][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:12:04][350331803557417][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331803557417\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-23 11:12:08][350331803557417][4854 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_638f3535-6a9f-41da-b22c-084fb4ed34cf","id":"QR_638f3535-6a9f-41da-b22c-084fb4ed34cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:12:08][350331803557417][5010 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 11:12:08][350331803557417][5010 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 11:12:08][350331803557417][5010 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:12:11][350362534021365][0 ms][INFO] === Request start === [2025-08-23 11:12:11][350362534021365][1 ms][DEBUG] START check_scloud [2025-08-23 11:12:11][350362534021365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:12:11][350362534021365][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11915 4968 24457784 134004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:12:11][350362534021365][319 ms][DEBUG] targetPkg: running [2025-08-23 11:12:11][350362534021365][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 11:12:11][350362534021365][319 ms][DEBUG] START check_boot_completed [2025-08-23 11:12:11][350362534021365][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:12:11][350362534021365][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:12:11][350362534021365][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:12:11][350362534021365][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:12:11][350362534021365][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:12:11][350362534021365][397 ms][DEBUG] START check_internet [2025-08-23 11:12:11][350362534021365][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.168/248.168/248.168/0.000 ms\n [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] check_internet: online [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] END check_internet in 360 ms [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:12:12][350362534021365][757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362534021365\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7606\"}'\'' -e'"" [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:12:12][350362534021365][757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362534021365\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7606\"}'\'' -e'"" [2025-08-23 11:12:15][350362534021365][4568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d757ae0-6b20-40bb-a7a4-094647c7fe7f","id":"QR_3d757ae0-6b20-40bb-a7a4-094647c7fe7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:12:16][350362534021365][4724 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-23 11:12:16][350362534021365][4724 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 11:12:16][350362534021365][4724 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:13:02][350637543420538][1 ms][INFO] === Request start === [2025-08-23 11:13:02][350637543420538][2 ms][DEBUG] START check_scloud [2025-08-23 11:13:02][350637543420538][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:13:03][350637543420538][278 ms][DEBUG] SU: done in 276 ms; outu0_a118 11915 4968 24581880 145556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:13:03][350637543420538][278 ms][DEBUG] targetPkg: running [2025-08-23 11:13:03][350637543420538][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 11:13:03][350637543420538][278 ms][DEBUG] START check_boot_completed [2025-08-23 11:13:03][350637543420538][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:13:03][350637543420538][324 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 11:13:03][350637543420538][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:13:03][350637543420538][417 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 11:13:03][350637543420538][417 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-23 11:13:03][350637543420538][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:13:03][350637543420538][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543420538\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-23 11:13:03][350637543420538][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:13:03][350637543420538][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543420538\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-23 11:13:07][350637543420538][4369 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3e812ba-161d-49d8-8d43-1d605ea8a1ae","id":"QR_c3e812ba-161d-49d8-8d43-1d605ea8a1ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:13:07][350637543420538][4525 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 11:13:07][350637543420538][4526 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 11:13:07][350637543420538][4526 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:14:03][350987615596263][0 ms][INFO] === Request start === [2025-08-23 11:14:03][350987615596263][1 ms][DEBUG] START check_scloud [2025-08-23 11:14:03][350987615596263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:14:03][350987615596263][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 11915 4968 24726364 156936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:14:03][350987615596263][262 ms][DEBUG] targetPkg: running [2025-08-23 11:14:03][350987615596263][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 11:14:03][350987615596263][262 ms][DEBUG] START check_boot_completed [2025-08-23 11:14:03][350987615596263][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:14:03][350987615596263][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:14:03][350987615596263][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:14:03][350987615596263][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:14:03][350987615596263][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:14:03][350987615596263][355 ms][DEBUG] START check_internet [2025-08-23 11:14:03][350987615596263][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.694/191.694/191.694/0.000 ms\n [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] check_internet: online [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] END check_internet in 297 ms [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:14:04][350987615596263][652 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615596263\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:14:04][350987615596263][652 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615596263\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-08-23 11:14:08][350987615596263][4901 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0900bcf8-1c7c-41b7-a967-4196b2edf18d","id":"QR_0900bcf8-1c7c-41b7-a967-4196b2edf18d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:14:08][350987615596263][5057 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 11:14:08][350987615596263][5057 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 11:14:08][350987615596263][5057 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:16:04][356329204508322][1 ms][INFO] === Request start === [2025-08-23 11:16:04][356329204508322][2 ms][DEBUG] START check_scloud [2025-08-23 11:16:04][356329204508322][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:16:05][356329204508322][277 ms][DEBUG] SU: done in 275 ms; outu0_a118 11915 4968 24889408 165508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:16:05][356329204508322][277 ms][DEBUG] targetPkg: running [2025-08-23 11:16:05][356329204508322][277 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 11:16:05][356329204508322][277 ms][DEBUG] START check_boot_completed [2025-08-23 11:16:05][356329204508322][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:16:05][356329204508322][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:16:05][356329204508322][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:16:05][356329204508322][386 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:16:05][356329204508322][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:16:05][356329204508322][386 ms][DEBUG] START check_internet [2025-08-23 11:16:05][356329204508322][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:16:05][356329204508322][948 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.505/199.505/199.505/0.000 ms\n [2025-08-23 11:16:05][356329204508322][949 ms][DEBUG] check_internet: online [2025-08-23 11:16:05][356329204508322][949 ms][DEBUG] END check_internet in 563 ms [2025-08-23 11:16:05][356329204508322][949 ms][DEBUG] rawBody.length=1158 [2025-08-23 11:16:05][356329204508322][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356329204508322\",\"model\":\"SM-T733\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52RC057KRX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6008\"}'\'' -e'"" [2025-08-23 11:16:05][356329204508322][949 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:16:05][356329204508322][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356329204508322\",\"model\":\"SM-T733\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52RC057KRX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6008\"}'\'' -e'"" [2025-08-23 11:16:10][356329204508322][5229 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_129f02b4-7033-40b0-b9af-e77495a289f8","id":"QR_129f02b4-7033-40b0-b9af-e77495a289f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:16:10][356329204508322][5385 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 11:16:10][356329204508322][5385 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 11:16:10][356329204508322][5385 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:16:12][357262978043920][0 ms][INFO] === Request start === [2025-08-23 11:16:12][357262978043920][1 ms][DEBUG] START check_scloud [2025-08-23 11:16:12][357262978043920][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:16:12][357262978043920][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11915 4968 25059652 176156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:16:12][357262978043920][313 ms][DEBUG] targetPkg: running [2025-08-23 11:16:12][357262978043920][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 11:16:12][357262978043920][314 ms][DEBUG] START check_boot_completed [2025-08-23 11:16:12][357262978043920][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:16:12][357262978043920][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:16:12][357262978043920][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:16:13][357262978043920][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:16:13][357262978043920][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:16:13][357262978043920][407 ms][DEBUG] START check_internet [2025-08-23 11:16:13][357262978043920][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:16:13][357262978043920][704 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.127/194.127/194.127/0.000 ms\n [2025-08-23 11:16:13][357262978043920][704 ms][DEBUG] check_internet: online [2025-08-23 11:16:13][357262978043920][704 ms][DEBUG] END check_internet in 297 ms [2025-08-23 11:16:13][357262978043920][704 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:16:13][357262978043920][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262978043920\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-08-23 11:16:13][357262978043920][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:16:13][357262978043920][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262978043920\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-08-23 11:16:17][357262978043920][4406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c2a94f7-e99d-43d6-bf41-516aebd2ca33","id":"QR_8c2a94f7-e99d-43d6-bf41-516aebd2ca33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:16:17][357262978043920][4562 ms][DEBUG] proc_open done in 3857 ms; code=255; res.len=3343 [2025-08-23 11:16:17][357262978043920][4562 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 11:16:17][357262978043920][4562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:17:02][353881487094266][0 ms][INFO] === Request start === [2025-08-23 11:17:02][353881487094266][1 ms][DEBUG] START check_scloud [2025-08-23 11:17:02][353881487094266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:17:03][353881487094266][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 11915 4968 25211396 187264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:17:03][353881487094266][322 ms][DEBUG] targetPkg: running [2025-08-23 11:17:03][353881487094266][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 11:17:03][353881487094266][322 ms][DEBUG] START check_boot_completed [2025-08-23 11:17:03][353881487094266][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:17:03][353881487094266][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:17:03][353881487094266][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:17:03][353881487094266][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:17:03][353881487094266][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:17:03][353881487094266][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:17:03][353881487094266][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881487094266\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-23 11:17:03][353881487094266][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:17:03][353881487094266][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881487094266\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-23 11:17:07][353881487094266][4743 ms][DEBUG] proc_open done in 4342 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 11:17:07][353881487094266][4743 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-23 11:17:07][353881487094266][4743 ms][WARN] Detected error: Process with pid 11915 either refused to load frida-agent, or terminated during injection [2025-08-23 11:17:07][353881487094266][4743 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 11:17:07][353881487094266][4899 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 11:17:07][353881487094266][4899 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 11:17:07][353881487094266][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 11:17:07][353881487094266][5071 ms][DEBUG] SU: done in 171 ms; out [2025-08-23 11:17:07][353881487094266][5071 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 11:17:08][353881487094266][5258 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 11:17:10][353881487094266][7273 ms][DEBUG] START check_boot_completed [2025-08-23 11:17:10][353881487094266][7274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:17:10][353881487094266][7320 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:17:10][353881487094266][7320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:17:10][353881487094266][7367 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:17:10][353881487094266][7367 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:17:13][353881487094266][10382 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 11:17:13][353881487094266][10382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881487094266\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-23 11:17:17][353881487094266][14428 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1248b0bd-0344-4b3a-89aa-9ced61610349","id":"QR_1248b0bd-0344-4b3a-89aa-9ced61610349","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:17:17][353881487094266][14584 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 11:17:17][353881487094266][14584 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-23 11:17:17][353881487094266][14584 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:20:05][350437731217592][1 ms][INFO] === Request start === [2025-08-23 11:20:05][350437731217592][2 ms][DEBUG] START check_scloud [2025-08-23 11:20:05][350437731217592][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:20:05][350437731217592][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 18761 4968 23675592 126780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:20:05][350437731217592][272 ms][DEBUG] targetPkg: running [2025-08-23 11:20:05][350437731217592][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-23 11:20:05][350437731217592][272 ms][DEBUG] START check_boot_completed [2025-08-23 11:20:05][350437731217592][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:20:05][350437731217592][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:20:05][350437731217592][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:20:05][350437731217592][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:20:05][350437731217592][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:20:05][350437731217592][351 ms][DEBUG] START check_internet [2025-08-23 11:20:05][350437731217592][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:20:06][350437731217592][788 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.874/200.874/200.874/0.000 ms\n [2025-08-23 11:20:06][350437731217592][788 ms][DEBUG] check_internet: online [2025-08-23 11:20:06][350437731217592][788 ms][DEBUG] END check_internet in 437 ms [2025-08-23 11:20:06][350437731217592][788 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:20:06][350437731217592][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437731217592\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7058\"}'\'' -e'"" [2025-08-23 11:20:06][350437731217592][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:20:06][350437731217592][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437731217592\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7058\"}'\'' -e'"" [2025-08-23 11:20:12][350437731217592][6865 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d76a515-52d3-4fd1-9667-fbb5601e2b03","id":"QR_5d76a515-52d3-4fd1-9667-fbb5601e2b03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:20:12][350437731217592][7021 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-08-23 11:20:12][350437731217592][7021 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-08-23 11:20:12][350437731217592][7021 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:22:02][352397457946295][1 ms][INFO] === Request start === [2025-08-23 11:22:02][352397457946295][2 ms][DEBUG] START check_scloud [2025-08-23 11:22:02][352397457946295][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:22:03][352397457946295][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 18761 4968 23824264 137856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:22:03][352397457946295][299 ms][DEBUG] targetPkg: running [2025-08-23 11:22:03][352397457946295][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 11:22:03][352397457946295][299 ms][DEBUG] START check_boot_completed [2025-08-23 11:22:03][352397457946295][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:22:03][352397457946295][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:22:03][352397457946295][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:22:03][352397457946295][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:22:03][352397457946295][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:22:03][352397457946295][377 ms][DEBUG] START check_internet [2025-08-23 11:22:03][352397457946295][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:22:03][352397457946295][658 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.411/171.411/171.411/0.000 ms\n [2025-08-23 11:22:03][352397457946295][658 ms][DEBUG] check_internet: online [2025-08-23 11:22:03][352397457946295][658 ms][DEBUG] END check_internet in 281 ms [2025-08-23 11:22:03][352397457946295][658 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:22:03][352397457946295][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457946295\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6576\"}'\'' -e'"" [2025-08-23 11:22:03][352397457946295][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:22:03][352397457946295][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457946295\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6576\"}'\'' -e'"" [2025-08-23 11:22:07][352397457946295][4860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a34a924a-ba32-4330-9100-828221ba3ff8","id":"QR_a34a924a-ba32-4330-9100-828221ba3ff8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:22:07][352397457946295][5016 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-23 11:22:07][352397457946295][5016 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 11:22:07][352397457946295][5016 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:22:09][351877471296471][0 ms][INFO] === Request start === [2025-08-23 11:22:09][351877471296471][1 ms][DEBUG] START check_scloud [2025-08-23 11:22:09][351877471296471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:22:09][351877471296471][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18761 4968 23964944 149692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:22:09][351877471296471][313 ms][DEBUG] targetPkg: running [2025-08-23 11:22:09][351877471296471][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 11:22:09][351877471296471][313 ms][DEBUG] START check_boot_completed [2025-08-23 11:22:09][351877471296471][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:22:09][351877471296471][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:22:09][351877471296471][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:22:09][351877471296471][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:22:09][351877471296471][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:22:09][351877471296471][407 ms][DEBUG] START check_internet [2025-08-23 11:22:09][351877471296471][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.560/243.560/243.560/0.000 ms\n [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] check_internet: online [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] END check_internet in 343 ms [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:22:10][351877471296471][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471296471\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:22:10][351877471296471][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471296471\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-23 11:22:14][351877471296471][4515 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a4d95f6-2f0e-4c3b-b877-f3467c894718","id":"QR_3a4d95f6-2f0e-4c3b-b877-f3467c894718","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:22:14][351877471296471][4671 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-23 11:22:14][351877471296471][4671 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 11:22:14][351877471296471][4671 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:22:15][351648440579630][0 ms][INFO] === Request start === [2025-08-23 11:22:15][351648440579630][1 ms][DEBUG] START check_scloud [2025-08-23 11:22:15][351648440579630][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:22:15][351648440579630][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 18761 4968 24114712 160816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:22:15][351648440579630][285 ms][DEBUG] targetPkg: running [2025-08-23 11:22:15][351648440579630][285 ms][DEBUG] END check_scloud in 285 ms [2025-08-23 11:22:15][351648440579630][286 ms][DEBUG] START check_boot_completed [2025-08-23 11:22:15][351648440579630][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:22:15][351648440579630][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:22:15][351648440579630][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:22:16][351648440579630][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:22:16][351648440579630][394 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 11:22:16][351648440579630][394 ms][DEBUG] START check_internet [2025-08-23 11:22:16][351648440579630][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.023/171.023/171.023/0.000 ms\n [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] check_internet: online [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] END check_internet in 282 ms [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:22:16][351648440579630][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440579630\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1534\"}'\'' -e'"" [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:22:16][351648440579630][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440579630\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1534\"}'\'' -e'"" [2025-08-23 11:22:20][351648440579630][4408 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a83ef7b7-6a97-4c82-b2cf-1e70cdc46443","id":"QR_a83ef7b7-6a97-4c82-b2cf-1e70cdc46443","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:22:20][351648440579630][4564 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-23 11:22:20][351648440579630][4564 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 11:22:20][351648440579630][4565 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:24:03][352192669793589][1 ms][INFO] === Request start === [2025-08-23 11:24:03][352192669793589][2 ms][DEBUG] START check_scloud [2025-08-23 11:24:03][352192669793589][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:24:03][352192669793589][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 18761 4968 24195508 171720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:24:03][352192669793589][309 ms][DEBUG] targetPkg: running [2025-08-23 11:24:03][352192669793589][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 11:24:03][352192669793589][309 ms][DEBUG] START check_boot_completed [2025-08-23 11:24:03][352192669793589][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:24:03][352192669793589][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:24:03][352192669793589][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:24:03][352192669793589][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:24:03][352192669793589][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:24:03][352192669793589][418 ms][DEBUG] START check_internet [2025-08-23 11:24:03][352192669793589][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:24:03][352192669793589][809 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.329/255.329/255.329/0.000 ms\n [2025-08-23 11:24:03][352192669793589][809 ms][DEBUG] check_internet: online [2025-08-23 11:24:03][352192669793589][809 ms][DEBUG] END check_internet in 391 ms [2025-08-23 11:24:03][352192669793589][809 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:24:03][352192669793589][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669793589\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1696\"}'\'' -e'"" [2025-08-23 11:24:03][352192669793589][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:24:03][352192669793589][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669793589\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1696\"}'\'' -e'"" [2025-08-23 11:24:08][352192669793589][4902 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ade9cc6b-13bc-4a12-8e81-f7d47204e593","id":"QR_ade9cc6b-13bc-4a12-8e81-f7d47204e593","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:24:08][352192669793589][5058 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 11:24:08][352192669793589][5058 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 11:24:08][352192669793589][5058 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:24:10][350973420529152][0 ms][INFO] === Request start === [2025-08-23 11:24:10][350973420529152][1 ms][DEBUG] START check_scloud [2025-08-23 11:24:10][350973420529152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:24:11][350973420529152][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18761 4968 24335932 183484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:24:11][350973420529152][298 ms][DEBUG] targetPkg: running [2025-08-23 11:24:11][350973420529152][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 11:24:11][350973420529152][298 ms][DEBUG] START check_boot_completed [2025-08-23 11:24:11][350973420529152][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:24:11][350973420529152][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:24:11][350973420529152][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:24:11][350973420529152][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:24:11][350973420529152][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:24:11][350973420529152][407 ms][DEBUG] START check_internet [2025-08-23 11:24:11][350973420529152][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.298/211.298/211.298/0.000 ms\n [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] check_internet: online [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] END check_internet in 312 ms [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:24:11][350973420529152][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973420529152\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1333\"}'\'' -e'"" [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:24:11][350973420529152][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973420529152\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1333\"}'\'' -e'"" [2025-08-23 11:24:15][350973420529152][4594 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23799d68-8b32-4ce4-8ebf-32c076870725","id":"QR_23799d68-8b32-4ce4-8ebf-32c076870725","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:24:15][350973420529152][4750 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 11:24:15][350973420529152][4750 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 11:24:15][350973420529152][4750 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:25:03][352288966930609][0 ms][INFO] === Request start === [2025-08-23 11:25:03][352288966930609][1 ms][DEBUG] START check_scloud [2025-08-23 11:25:03][352288966930609][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:25:03][352288966930609][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18761 4968 24462076 194688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:25:03][352288966930609][300 ms][DEBUG] targetPkg: running [2025-08-23 11:25:03][352288966930609][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 11:25:03][352288966930609][300 ms][DEBUG] START check_boot_completed [2025-08-23 11:25:03][352288966930609][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:25:03][352288966930609][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:25:03][352288966930609][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:25:03][352288966930609][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:25:03][352288966930609][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:25:03][352288966930609][394 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:25:03][352288966930609][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966930609\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-08-23 11:25:03][352288966930609][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:25:03][352288966930609][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966930609\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-08-23 11:25:07][352288966930609][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8ef597c-cc74-48e6-a21e-e7fbf9d33bb8","id":"QR_a8ef597c-cc74-48e6-a21e-e7fbf9d33bb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:25:07][352288966930609][4643 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 11:25:07][352288966930609][4643 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 11:25:07][352288966930609][4643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:26:05][352927940571449][1 ms][INFO] === Request start === [2025-08-23 11:26:05][352927940571449][2 ms][DEBUG] START check_scloud [2025-08-23 11:26:05][352927940571449][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:26:05][352927940571449][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18761 4968 24610784 206848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:26:05][352927940571449][301 ms][DEBUG] targetPkg: running [2025-08-23 11:26:05][352927940571449][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 11:26:05][352927940571449][301 ms][DEBUG] START check_boot_completed [2025-08-23 11:26:05][352927940571449][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:26:05][352927940571449][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:26:05][352927940571449][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:26:05][352927940571449][395 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 11:26:05][352927940571449][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:26:05][352927940571449][396 ms][DEBUG] START check_internet [2025-08-23 11:26:05][352927940571449][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.961/199.961/199.961/0.000 ms\n [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] check_internet: online [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] END check_internet in 499 ms [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:26:05][352927940571449][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6342\"}'\'' -e'"" [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:26:05][352927940571449][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6342\"}'\'' -e'"" [2025-08-23 11:26:09][352927940571449][4612 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 11:26:09][352927940571449][4769 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=107 [2025-08-23 11:26:09][352927940571449][4769 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-23 11:26:09][352927940571449][4769 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 11:26:10][][0 ms][INFO] === Request start === [2025-08-23 11:26:10][][1 ms][DEBUG] START check_scloud [2025-08-23 11:26:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:26:10][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18761 4968 24773864 217144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:26:10][][318 ms][DEBUG] targetPkg: running [2025-08-23 11:26:10][][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 11:26:10][][318 ms][DEBUG] START check_boot_completed [2025-08-23 11:26:10][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:26:10][][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:26:10][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:26:10][][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:26:10][][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:26:10][][427 ms][DEBUG] START check_internet [2025-08-23 11:26:10][][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:26:10][][708 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.914/137.914/137.914/0.000 ms\n [2025-08-23 11:26:10][][708 ms][DEBUG] check_internet: online [2025-08-23 11:26:10][][708 ms][DEBUG] END check_internet in 281 ms [2025-08-23 11:26:10][][708 ms][DEBUG] rawBody.length=1129 [2025-08-23 11:26:10][][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ZY40V9SPE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8284\"}'\'' -e'"" [2025-08-23 11:26:10][][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:26:10][][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ZY40V9SPE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8284\"}'\'' -e'"" [2025-08-23 11:26:14][][4145 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 11:26:14][][4301 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=107 [2025-08-23 11:26:14][][4301 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-23 11:26:14][][4301 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 11:26:16][352927940571449][0 ms][INFO] === Request start === [2025-08-23 11:26:16][352927940571449][1 ms][DEBUG] START check_scloud [2025-08-23 11:26:16][352927940571449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:26:16][352927940571449][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18761 4968 24936944 229004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:26:16][352927940571449][301 ms][DEBUG] targetPkg: running [2025-08-23 11:26:16][352927940571449][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 11:26:16][352927940571449][301 ms][DEBUG] START check_boot_completed [2025-08-23 11:26:16][352927940571449][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:26:16][352927940571449][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:26:16][352927940571449][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:26:16][352927940571449][441 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 11:26:16][352927940571449][441 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 11:26:16][352927940571449][442 ms][DEBUG] START check_internet [2025-08-23 11:26:16][352927940571449][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:26:17][352927940571449][707 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.994/144.994/144.994/0.000 ms\n [2025-08-23 11:26:17][352927940571449][707 ms][DEBUG] check_internet: online [2025-08-23 11:26:17][352927940571449][707 ms][DEBUG] END check_internet in 266 ms [2025-08-23 11:26:17][352927940571449][707 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:26:17][352927940571449][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6229\"}'\'' -e'"" [2025-08-23 11:26:17][352927940571449][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:26:17][352927940571449][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6229\"}'\'' -e'"" [2025-08-23 11:26:23][352927940571449][7158 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58b86a7c-06c6-4090-9a45-8a72e75c19a2","id":"QR_58b86a7c-06c6-4090-9a45-8a72e75c19a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:26:23][352927940571449][7315 ms][DEBUG] proc_open done in 6607 ms; code=255; res.len=3343 [2025-08-23 11:26:23][352927940571449][7315 ms][DEBUG] END runCmdUntilRes#1 in 6607 ms [2025-08-23 11:26:23][352927940571449][7315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:29:03][352469859481393][1 ms][INFO] === Request start === [2025-08-23 11:29:03][352469859481393][2 ms][DEBUG] START check_scloud [2025-08-23 11:29:03][352469859481393][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:29:04][352469859481393][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18761 4968 25013904 240292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:29:04][352469859481393][298 ms][DEBUG] targetPkg: running [2025-08-23 11:29:04][352469859481393][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 11:29:04][352469859481393][298 ms][DEBUG] START check_boot_completed [2025-08-23 11:29:04][352469859481393][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:29:04][352469859481393][328 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 11:29:04][352469859481393][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:29:04][352469859481393][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:29:04][352469859481393][375 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 11:29:04][352469859481393][375 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:29:04][352469859481393][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859481393\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8017\"}'\'' -e'"" [2025-08-23 11:29:04][352469859481393][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:29:04][352469859481393][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859481393\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8017\"}'\'' -e'"" [2025-08-23 11:29:08][352469859481393][4062 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 11:29:08][352469859481393][4062 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-23 11:29:08][352469859481393][4062 ms][WARN] Detected error: Process with pid 18761 either refused to load frida-agent, or terminated during injection [2025-08-23 11:29:08][352469859481393][4062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 11:29:08][352469859481393][4218 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 11:29:08][352469859481393][4218 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 11:29:08][352469859481393][4218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 11:29:08][352469859481393][4359 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 11:29:08][352469859481393][4359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 11:29:08][352469859481393][4499 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 11:29:10][352469859481393][6514 ms][DEBUG] START check_boot_completed [2025-08-23 11:29:10][352469859481393][6514 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:29:10][352469859481393][6561 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:29:10][352469859481393][6561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:29:10][352469859481393][6624 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:29:10][352469859481393][6624 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:29:13][352469859481393][9638 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 11:29:13][352469859481393][9639 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859481393\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8017\"}'\'' -e'"" [2025-08-23 11:29:17][352469859481393][13747 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e3ab1db-ac00-4d81-94a1-71f224d95483","id":"QR_9e3ab1db-ac00-4d81-94a1-71f224d95483","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:29:17][352469859481393][13903 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 11:29:17][352469859481393][13903 ms][DEBUG] END runCmdUntilRes#2 in 4265 ms [2025-08-23 11:29:17][352469859481393][13903 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:30:04][353628420224439][0 ms][INFO] === Request start === [2025-08-23 11:30:04][353628420224439][0 ms][DEBUG] START check_scloud [2025-08-23 11:30:04][353628420224439][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:30:05][353628420224439][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 20146 4968 23630224 127444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:30:05][353628420224439][305 ms][DEBUG] targetPkg: running [2025-08-23 11:30:05][353628420224439][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 11:30:05][353628420224439][305 ms][DEBUG] START check_boot_completed [2025-08-23 11:30:05][353628420224439][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:30:05][353628420224439][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:30:05][353628420224439][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:30:05][353628420224439][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:30:05][353628420224439][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:30:05][353628420224439][383 ms][DEBUG] START check_internet [2025-08-23 11:30:05][353628420224439][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.886/200.886/200.886/0.000 ms\n [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] check_internet: online [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] END check_internet in 469 ms [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:30:05][353628420224439][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628420224439\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7334\"}'\'' -e'"" [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:30:05][353628420224439][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628420224439\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7334\"}'\'' -e'"" [2025-08-23 11:30:09][353628420224439][4632 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bc2f4da-941e-4aca-85fb-e29dbceb40fc","id":"QR_1bc2f4da-941e-4aca-85fb-e29dbceb40fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:30:09][353628420224439][4788 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 11:30:09][353628420224439][4788 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 11:30:09][353628420224439][4788 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:31:03][351272331402560][0 ms][INFO] === Request start === [2025-08-23 11:31:03][351272331402560][1 ms][DEBUG] START check_scloud [2025-08-23 11:31:03][351272331402560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:31:03][351272331402560][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 20146 4968 23744052 138108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:31:03][351272331402560][258 ms][DEBUG] targetPkg: running [2025-08-23 11:31:03][351272331402560][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 11:31:03][351272331402560][258 ms][DEBUG] START check_boot_completed [2025-08-23 11:31:03][351272331402560][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:31:03][351272331402560][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:31:03][351272331402560][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:31:03][351272331402560][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:31:03][351272331402560][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:31:03][351272331402560][352 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:31:03][351272331402560][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272331402560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-23 11:31:03][351272331402560][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:31:03][351272331402560][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272331402560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-23 11:31:08][351272331402560][4554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9db681a-b0bc-4f07-8c0a-4025e2069e68","id":"QR_a9db681a-b0bc-4f07-8c0a-4025e2069e68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:31:08][351272331402560][4710 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 11:31:08][351272331402560][4710 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 11:31:08][351272331402560][4710 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:31:12][350287315541440][1 ms][INFO] === Request start === [2025-08-23 11:31:12][350287315541440][2 ms][DEBUG] START check_scloud [2025-08-23 11:31:12][350287315541440][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:31:12][350287315541440][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 20146 4968 23903856 150004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:31:12][350287315541440][300 ms][DEBUG] targetPkg: running [2025-08-23 11:31:12][350287315541440][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 11:31:12][350287315541440][300 ms][DEBUG] START check_boot_completed [2025-08-23 11:31:12][350287315541440][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:31:12][350287315541440][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:31:12][350287315541440][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:31:12][350287315541440][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:31:12][350287315541440][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:31:12][350287315541440][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:31:12][350287315541440][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7602\"}'\'' -e'"" [2025-08-23 11:31:12][350287315541440][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:31:12][350287315541440][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7602\"}'\'' -e'"" [2025-08-23 11:31:16][350287315541440][4127 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 11:31:16][350287315541440][4283 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-23 11:31:16][350287315541440][4283 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-23 11:31:16][350287315541440][4283 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 11:31:16][][0 ms][INFO] === Request start === [2025-08-23 11:31:16][][1 ms][DEBUG] START check_scloud [2025-08-23 11:31:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:31:17][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20146 4968 24034168 160924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:31:17][][308 ms][DEBUG] targetPkg: running [2025-08-23 11:31:17][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 11:31:17][][308 ms][DEBUG] START check_boot_completed [2025-08-23 11:31:17][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:31:17][][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:31:17][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:31:17][][417 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 11:31:17][][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:31:17][][417 ms][DEBUG] rawBody.length=1129 [2025-08-23 11:31:17][][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4235\"}'\'' -e'"" [2025-08-23 11:31:17][][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:31:17][][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4235\"}'\'' -e'"" [2025-08-23 11:31:20][][3838 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 11:31:20][][3994 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-23 11:31:20][][3994 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-23 11:31:20][][3994 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 11:31:23][350287315541440][0 ms][INFO] === Request start === [2025-08-23 11:31:23][350287315541440][1 ms][DEBUG] START check_scloud [2025-08-23 11:31:23][350287315541440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:31:23][350287315541440][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 20146 4968 24199104 172704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:31:23][350287315541440][281 ms][DEBUG] targetPkg: running [2025-08-23 11:31:23][350287315541440][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-23 11:31:23][350287315541440][281 ms][DEBUG] START check_boot_completed [2025-08-23 11:31:23][350287315541440][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:31:23][350287315541440][326 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 11:31:23][350287315541440][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:31:23][350287315541440][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:31:23][350287315541440][373 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 11:31:23][350287315541440][373 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:31:23][350287315541440][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9249\"}'\'' -e'"" [2025-08-23 11:31:23][350287315541440][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:31:23][350287315541440][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9249\"}'\'' -e'"" [2025-08-23 11:31:29][350287315541440][6059 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d40b183-8106-40f1-b238-709330a9682d","id":"QR_5d40b183-8106-40f1-b238-709330a9682d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:31:29][350287315541440][6215 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-08-23 11:31:29][350287315541440][6215 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 11:31:29][350287315541440][6215 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:32:02][350100350007294][1 ms][INFO] === Request start === [2025-08-23 11:32:02][350100350007294][2 ms][DEBUG] START check_scloud [2025-08-23 11:32:02][350100350007294][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:32:03][350100350007294][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 20146 4968 24300472 183860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:32:03][350100350007294][298 ms][DEBUG] targetPkg: running [2025-08-23 11:32:03][350100350007294][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 11:32:03][350100350007294][299 ms][DEBUG] START check_boot_completed [2025-08-23 11:32:03][350100350007294][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:32:03][350100350007294][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:32:03][350100350007294][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:32:03][350100350007294][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 11:32:03][350100350007294][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 11:32:03][350100350007294][394 ms][DEBUG] START check_internet [2025-08-23 11:32:03][350100350007294][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:32:03][350100350007294][704 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.659/197.659/197.659/0.000 ms\n [2025-08-23 11:32:03][350100350007294][705 ms][DEBUG] check_internet: online [2025-08-23 11:32:03][350100350007294][705 ms][DEBUG] END check_internet in 311 ms [2025-08-23 11:32:03][350100350007294][705 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:32:03][350100350007294][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350007294\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2633\"}'\'' -e'"" [2025-08-23 11:32:03][350100350007294][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:32:03][350100350007294][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350007294\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2633\"}'\'' -e'"" [2025-08-23 11:32:07][350100350007294][4500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a5d015e-6ea4-4da2-b1f2-ca50bd377377","id":"QR_0a5d015e-6ea4-4da2-b1f2-ca50bd377377","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:32:07][350100350007294][4656 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-23 11:32:07][350100350007294][4656 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 11:32:07][350100350007294][4656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:32:11][350320123309518][0 ms][INFO] === Request start === [2025-08-23 11:32:11][350320123309518][1 ms][DEBUG] START check_scloud [2025-08-23 11:32:11][350320123309518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:32:12][350320123309518][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 20146 4968 24434884 195724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:32:12][350320123309518][289 ms][DEBUG] targetPkg: running [2025-08-23 11:32:12][350320123309518][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 11:32:12][350320123309518][289 ms][DEBUG] START check_boot_completed [2025-08-23 11:32:12][350320123309518][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:32:12][350320123309518][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:32:12][350320123309518][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:32:12][350320123309518][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 11:32:12][350320123309518][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:32:12][350320123309518][398 ms][DEBUG] START check_internet [2025-08-23 11:32:12][350320123309518][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:32:12][350320123309518][679 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.191/188.191/188.191/0.000 ms\n [2025-08-23 11:32:12][350320123309518][679 ms][DEBUG] check_internet: online [2025-08-23 11:32:12][350320123309518][680 ms][DEBUG] END check_internet in 281 ms [2025-08-23 11:32:12][350320123309518][680 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:32:12][350320123309518][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320123309518\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3020\"}'\'' -e'"" [2025-08-23 11:32:12][350320123309518][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:32:12][350320123309518][680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320123309518\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3020\"}'\'' -e'"" [2025-08-23 11:32:17][350320123309518][5850 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad8da0ab-5519-4950-8ac0-3472f927e213","id":"QR_ad8da0ab-5519-4950-8ac0-3472f927e213","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:32:17][350320123309518][6006 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-23 11:32:17][350320123309518][6006 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-23 11:32:17][350320123309518][6006 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:35:05][356544398913951][1 ms][INFO] === Request start === [2025-08-23 11:35:05][356544398913951][2 ms][DEBUG] START check_scloud [2025-08-23 11:35:05][356544398913951][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:35:05][356544398913951][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 20146 4968 24587708 207300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:35:05][356544398913951][295 ms][DEBUG] targetPkg: running [2025-08-23 11:35:05][356544398913951][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 11:35:05][356544398913951][296 ms][DEBUG] START check_boot_completed [2025-08-23 11:35:05][356544398913951][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:35:05][356544398913951][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:35:05][356544398913951][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:35:05][356544398913951][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:35:05][356544398913951][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:35:05][356544398913951][389 ms][DEBUG] rawBody.length=1149 [2025-08-23 11:35:05][356544398913951][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544398913951\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1434\"}'\'' -e'"" [2025-08-23 11:35:05][356544398913951][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:35:05][356544398913951][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544398913951\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1434\"}'\'' -e'"" [2025-08-23 11:35:11][356544398913951][6481 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65a3a830-e400-45f9-b63a-fe84fd9bac0a","id":"QR_65a3a830-e400-45f9-b63a-fe84fd9bac0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:35:11][356544398913951][6637 ms][DEBUG] proc_open done in 6248 ms; code=255; res.len=3343 [2025-08-23 11:35:11][356544398913951][6638 ms][DEBUG] END runCmdUntilRes#1 in 6248 ms [2025-08-23 11:35:11][356544398913951][6638 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:35:16][350876474235438][0 ms][INFO] === Request start === [2025-08-23 11:35:16][350876474235438][1 ms][DEBUG] START check_scloud [2025-08-23 11:35:16][350876474235438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:35:16][350876474235438][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 20146 4968 24769092 218416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:35:16][350876474235438][277 ms][DEBUG] targetPkg: running [2025-08-23 11:35:16][350876474235438][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 11:35:16][350876474235438][277 ms][DEBUG] START check_boot_completed [2025-08-23 11:35:16][350876474235438][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:35:16][350876474235438][323 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:35:16][350876474235438][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:35:16][350876474235438][386 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 11:35:16][350876474235438][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 11:35:16][350876474235438][386 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:35:16][350876474235438][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876474235438\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9430\"}'\'' -e'"" [2025-08-23 11:35:16][350876474235438][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:35:16][350876474235438][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876474235438\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9430\"}'\'' -e'"" [2025-08-23 11:35:21][350876474235438][4697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1d1586a-5e4c-49a2-9b19-89d7648c5094","id":"QR_f1d1586a-5e4c-49a2-9b19-89d7648c5094","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:35:21][350876474235438][4853 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-23 11:35:21][350876474235438][4853 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-23 11:35:21][350876474235438][4853 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:36:03][351263051372521][0 ms][INFO] === Request start === [2025-08-23 11:36:03][351263051372521][1 ms][DEBUG] START check_scloud [2025-08-23 11:36:03][351263051372521][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:36:03][351263051372521][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 20146 4968 24891140 179624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:36:03][351263051372521][266 ms][DEBUG] targetPkg: running [2025-08-23 11:36:03][351263051372521][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 11:36:03][351263051372521][266 ms][DEBUG] START check_boot_completed [2025-08-23 11:36:03][351263051372521][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:36:03][351263051372521][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:36:03][351263051372521][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:36:03][351263051372521][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:36:03][351263051372521][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:36:03][351263051372521][359 ms][DEBUG] START check_internet [2025-08-23 11:36:03][351263051372521][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:36:04][351263051372521][843 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.822/201.822/201.822/0.000 ms\n [2025-08-23 11:36:04][351263051372521][843 ms][DEBUG] check_internet: online [2025-08-23 11:36:04][351263051372521][843 ms][DEBUG] END check_internet in 485 ms [2025-08-23 11:36:04][351263051372521][843 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:36:04][351263051372521][843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051372521\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-08-23 11:36:04][351263051372521][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:36:04][351263051372521][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051372521\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-08-23 11:36:08][351263051372521][5076 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bcecd8f0-3695-4694-80c6-ec3e44a704d7","id":"QR_bcecd8f0-3695-4694-80c6-ec3e44a704d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:36:08][351263051372521][5233 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 11:36:08][351263051372521][5233 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 11:36:08][351263051372521][5233 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:37:03][350178738841352][0 ms][INFO] === Request start === [2025-08-23 11:37:03][350178738841352][1 ms][DEBUG] START check_scloud [2025-08-23 11:37:03][350178738841352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:37:03][350178738841352][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 20146 4968 25019368 172600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:37:03][350178738841352][270 ms][DEBUG] targetPkg: running [2025-08-23 11:37:03][350178738841352][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-23 11:37:03][350178738841352][270 ms][DEBUG] START check_boot_completed [2025-08-23 11:37:03][350178738841352][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:37:04][350178738841352][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:37:04][350178738841352][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:37:04][350178738841352][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:37:04][350178738841352][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:37:04][350178738841352][348 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:37:04][350178738841352][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738841352\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8988\"}'\'' -e'"" [2025-08-23 11:37:04][350178738841352][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:37:04][350178738841352][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738841352\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8988\"}'\'' -e'"" [2025-08-23 11:37:07][350178738841352][4097 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 11:37:07][350178738841352][4097 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-23 11:37:07][350178738841352][4097 ms][WARN] Detected error: Process with pid 20146 either refused to load frida-agent, or terminated during injection [2025-08-23 11:37:07][350178738841352][4097 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 11:37:07][350178738841352][4240 ms][DEBUG] SU: done in 142 ms; out [2025-08-23 11:37:07][350178738841352][4240 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 11:37:07][350178738841352][4240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 11:37:08][350178738841352][4379 ms][DEBUG] SU: done in 139 ms; out [2025-08-23 11:37:08][350178738841352][4379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 11:37:08][350178738841352][4535 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 11:37:10][350178738841352][6550 ms][DEBUG] START check_boot_completed [2025-08-23 11:37:10][350178738841352][6550 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:37:10][350178738841352][6597 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:37:10][350178738841352][6597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:37:10][350178738841352][6644 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:37:10][350178738841352][6644 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:37:13][350178738841352][9658 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 11:37:13][350178738841352][9659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738841352\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8988\"}'\'' -e'"" [2025-08-23 11:37:17][350178738841352][13611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd2b42b2-ad83-4feb-b1d6-c713568c1b0d","id":"QR_bd2b42b2-ad83-4feb-b1d6-c713568c1b0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:37:17][350178738841352][13767 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 11:37:17][350178738841352][13767 ms][DEBUG] END runCmdUntilRes#2 in 4109 ms [2025-08-23 11:37:17][350178738841352][13767 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:38:03][354454653172222][1 ms][INFO] === Request start === [2025-08-23 11:38:03][354454653172222][2 ms][DEBUG] START check_scloud [2025-08-23 11:38:03][354454653172222][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:38:04][354454653172222][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 22342 4968 23672112 126876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:38:04][354454653172222][301 ms][DEBUG] targetPkg: running [2025-08-23 11:38:04][354454653172222][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 11:38:04][354454653172222][301 ms][DEBUG] START check_boot_completed [2025-08-23 11:38:04][354454653172222][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:38:04][354454653172222][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 11:38:04][354454653172222][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:38:04][354454653172222][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:38:04][354454653172222][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 11:38:04][354454653172222][379 ms][DEBUG] START check_internet [2025-08-23 11:38:04][354454653172222][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.574/174.574/174.574/0.000 ms\n [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] check_internet: online [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] END check_internet in 297 ms [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:38:04][354454653172222][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9086\"}'\'' -e'"" [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:38:04][354454653172222][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9086\"}'\'' -e'"" [2025-08-23 11:38:08][354454653172222][4597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fca363a-a32a-4833-b03a-4ca4441a75ff","id":"QR_6fca363a-a32a-4833-b03a-4ca4441a75ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:38:08][354454653172222][4753 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-23 11:38:08][354454653172222][4753 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 11:38:08][354454653172222][4753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:42:03][352192667806847][1 ms][INFO] === Request start === [2025-08-23 11:42:03][352192667806847][2 ms][DEBUG] START check_scloud [2025-08-23 11:42:03][352192667806847][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:42:03][352192667806847][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 22342 4968 23781888 137444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:42:03][352192667806847][308 ms][DEBUG] targetPkg: running [2025-08-23 11:42:03][352192667806847][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 11:42:03][352192667806847][308 ms][DEBUG] START check_boot_completed [2025-08-23 11:42:03][352192667806847][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:42:03][352192667806847][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:42:03][352192667806847][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:42:04][352192667806847][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 11:42:04][352192667806847][433 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-23 11:42:04][352192667806847][433 ms][DEBUG] START check_internet [2025-08-23 11:42:04][352192667806847][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.799/202.799/202.799/0.000 ms\n [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] check_internet: online [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] END check_internet in 562 ms [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:42:04][352192667806847][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667806847\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7468\"}'\'' -e'"" [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:42:04][352192667806847][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667806847\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7468\"}'\'' -e'"" [2025-08-23 11:42:08][352192667806847][5072 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9291abe6-9363-4464-84f4-ea2f4b47a6d0","id":"QR_9291abe6-9363-4464-84f4-ea2f4b47a6d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:42:08][352192667806847][5228 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 11:42:08][352192667806847][5228 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 11:42:08][352192667806847][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:44:03][356919955338851][0 ms][INFO] === Request start === [2025-08-23 11:44:03][356919955338851][1 ms][DEBUG] START check_scloud [2025-08-23 11:44:03][356919955338851][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:44:04][356919955338851][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 22342 4968 23909988 149464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:44:04][356919955338851][300 ms][DEBUG] targetPkg: running [2025-08-23 11:44:04][356919955338851][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 11:44:04][356919955338851][300 ms][DEBUG] START check_boot_completed [2025-08-23 11:44:04][356919955338851][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:44:04][356919955338851][331 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 11:44:04][356919955338851][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:44:04][356919955338851][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:44:04][356919955338851][378 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 11:44:04][356919955338851][378 ms][DEBUG] START check_internet [2025-08-23 11:44:04][356919955338851][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.288/315.288/315.288/0.000 ms\n [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] check_internet: online [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] END check_internet in 437 ms [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:44:04][356919955338851][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356919955338851\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7090\"}'\'' -e'"" [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:44:04][356919955338851][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356919955338851\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7090\"}'\'' -e'"" [2025-08-23 11:44:08][356919955338851][4783 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ed8286f-87fe-45eb-b5e2-9b1b7f3e8297","id":"QR_4ed8286f-87fe-45eb-b5e2-9b1b7f3e8297","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:44:08][356919955338851][4939 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-23 11:44:08][356919955338851][4939 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-23 11:44:08][356919955338851][4939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:44:11][350805650610965][1 ms][INFO] === Request start === [2025-08-23 11:44:11][350805650610965][2 ms][DEBUG] START check_scloud [2025-08-23 11:44:11][350805650610965][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:44:11][350805650610965][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 22342 4968 24035884 160144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:44:11][350805650610965][247 ms][DEBUG] targetPkg: running [2025-08-23 11:44:11][350805650610965][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-23 11:44:11][350805650610965][247 ms][DEBUG] START check_boot_completed [2025-08-23 11:44:11][350805650610965][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:44:11][350805650610965][294 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:44:11][350805650610965][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:44:11][350805650610965][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:44:11][350805650610965][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:44:11][350805650610965][341 ms][DEBUG] START check_internet [2025-08-23 11:44:11][350805650610965][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.934/229.934/229.934/0.000 ms\n [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] check_internet: online [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] END check_internet in 344 ms [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:44:12][350805650610965][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650610965\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7667\"}'\'' -e'"" [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:44:12][350805650610965][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650610965\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7667\"}'\'' -e'"" [2025-08-23 11:44:16][350805650610965][4699 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50bdc13f-4360-405b-9086-9817d9874c95","id":"QR_50bdc13f-4360-405b-9086-9817d9874c95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:44:16][350805650610965][4855 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 11:44:16][350805650610965][4856 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 11:44:16][350805650610965][4856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:47:03][351642480630056][1 ms][INFO] === Request start === [2025-08-23 11:47:03][351642480630056][2 ms][DEBUG] START check_scloud [2025-08-23 11:47:03][351642480630056][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:47:03][351642480630056][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 22342 4968 24186604 171216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:47:03][351642480630056][301 ms][DEBUG] targetPkg: running [2025-08-23 11:47:03][351642480630056][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 11:47:03][351642480630056][301 ms][DEBUG] START check_boot_completed [2025-08-23 11:47:03][351642480630056][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:47:03][351642480630056][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:47:03][351642480630056][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:47:03][351642480630056][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:47:03][351642480630056][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 11:47:03][351642480630056][395 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:47:03][351642480630056][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480630056\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9747\"}'\'' -e'"" [2025-08-23 11:47:03][351642480630056][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:47:03][351642480630056][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480630056\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9747\"}'\'' -e'"" [2025-08-23 11:47:07][351642480630056][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bc23e5b-5414-4d9c-9b48-5e0b30c5826b","id":"QR_0bc23e5b-5414-4d9c-9b48-5e0b30c5826b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:47:08][351642480630056][4706 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 11:47:08][351642480630056][4706 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 11:47:08][351642480630056][4706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:50:03][353475126187688][1 ms][INFO] === Request start === [2025-08-23 11:50:03][353475126187688][2 ms][DEBUG] START check_scloud [2025-08-23 11:50:03][353475126187688][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:50:03][353475126187688][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 22342 4968 24302416 183400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:50:03][353475126187688][292 ms][DEBUG] targetPkg: running [2025-08-23 11:50:03][353475126187688][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 11:50:03][353475126187688][292 ms][DEBUG] START check_boot_completed [2025-08-23 11:50:03][353475126187688][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:50:03][353475126187688][337 ms][DEBUG] ADB: done in 44 ms; out [2025-08-23 11:50:03][353475126187688][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:50:03][353475126187688][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:50:03][353475126187688][384 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-23 11:50:03][353475126187688][384 ms][DEBUG] START check_internet [2025-08-23 11:50:03][353475126187688][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.120/200.120/200.120/0.000 ms\n [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] check_internet: online [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] END check_internet in 453 ms [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:50:04][353475126187688][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475126187688\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1596\"}'\'' -e'"" [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:50:04][353475126187688][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475126187688\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1596\"}'\'' -e'"" [2025-08-23 11:50:08][353475126187688][4961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2656774c-3f3c-4626-a015-9b79e3925648","id":"QR_2656774c-3f3c-4626-a015-9b79e3925648","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:50:08][353475126187688][5117 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-23 11:50:08][353475126187688][5117 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 11:50:08][353475126187688][5117 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:50:10][352887815576503][0 ms][INFO] === Request start === [2025-08-23 11:50:10][352887815576503][1 ms][DEBUG] START check_scloud [2025-08-23 11:50:10][352887815576503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:50:11][352887815576503][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 22342 4968 24445016 194404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:50:11][352887815576503][311 ms][DEBUG] targetPkg: running [2025-08-23 11:50:11][352887815576503][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 11:50:11][352887815576503][311 ms][DEBUG] START check_boot_completed [2025-08-23 11:50:11][352887815576503][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:50:11][352887815576503][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:50:11][352887815576503][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:50:11][352887815576503][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:50:11][352887815576503][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:50:11][352887815576503][405 ms][DEBUG] START check_internet [2025-08-23 11:50:11][352887815576503][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.617/178.617/178.617/0.000 ms\n [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] check_internet: online [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] END check_internet in 297 ms [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:50:11][352887815576503][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887815576503\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7375\"}'\'' -e'"" [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:50:11][352887815576503][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887815576503\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7375\"}'\'' -e'"" [2025-08-23 11:50:15][352887815576503][4404 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3546189a-fbc8-40a5-ab31-818347f43811","id":"QR_3546189a-fbc8-40a5-ab31-818347f43811","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:50:15][352887815576503][4560 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 11:50:15][352887815576503][4560 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 11:50:15][352887815576503][4560 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:56:03][352600229022687][1 ms][INFO] === Request start === [2025-08-23 11:56:03][352600229022687][2 ms][DEBUG] START check_scloud [2025-08-23 11:56:03][352600229022687][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:56:03][352600229022687][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 22342 4968 24550424 206780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:56:03][352600229022687][310 ms][DEBUG] targetPkg: running [2025-08-23 11:56:03][352600229022687][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 11:56:03][352600229022687][310 ms][DEBUG] START check_boot_completed [2025-08-23 11:56:03][352600229022687][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:56:03][352600229022687][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 11:56:03][352600229022687][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:56:03][352600229022687][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 11:56:03][352600229022687][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 11:56:03][352600229022687][404 ms][DEBUG] START check_internet [2025-08-23 11:56:03][352600229022687][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.280/202.280/202.280/0.000 ms\n [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] check_internet: online [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] END check_internet in 453 ms [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:56:04][352600229022687][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2474\"}'\'' -e'"" [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:56:04][352600229022687][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2474\"}'\'' -e'"" [2025-08-23 11:56:08][352600229022687][4965 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37ce137b-9c10-428e-ad98-585fab2311a1","id":"QR_37ce137b-9c10-428e-ad98-585fab2311a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:56:08][352600229022687][5121 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 11:56:08][352600229022687][5121 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 11:56:08][352600229022687][5121 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 11:59:03][352192665726880][1 ms][INFO] === Request start === [2025-08-23 11:59:03][352192665726880][2 ms][DEBUG] START check_scloud [2025-08-23 11:59:03][352192665726880][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 11:59:03][352192665726880][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 22342 4968 24666364 218100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 11:59:03][352192665726880][307 ms][DEBUG] targetPkg: running [2025-08-23 11:59:03][352192665726880][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 11:59:03][352192665726880][307 ms][DEBUG] START check_boot_completed [2025-08-23 11:59:03][352192665726880][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 11:59:03][352192665726880][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 11:59:03][352192665726880][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 11:59:04][352192665726880][432 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 11:59:04][352192665726880][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 11:59:04][352192665726880][432 ms][DEBUG] rawBody.length=1148 [2025-08-23 11:59:04][352192665726880][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665726880\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9880\"}'\'' -e'"" [2025-08-23 11:59:04][352192665726880][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 11:59:04][352192665726880][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665726880\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9880\"}'\'' -e'"" [2025-08-23 11:59:08][352192665726880][4462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c18bc8b-c3eb-4b31-adc1-18ffdba2902a","id":"QR_3c18bc8b-c3eb-4b31-adc1-18ffdba2902a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 11:59:08][352192665726880][4618 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 11:59:08][352192665726880][4618 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 11:59:08][352192665726880][4618 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:04:03][356923587547186][1 ms][INFO] === Request start === [2025-08-23 12:04:03][356923587547186][2 ms][DEBUG] START check_scloud [2025-08-23 12:04:03][356923587547186][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:04:03][356923587547186][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22342 4968 24775840 224676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:04:03][356923587547186][305 ms][DEBUG] targetPkg: running [2025-08-23 12:04:03][356923587547186][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 12:04:03][356923587547186][305 ms][DEBUG] START check_boot_completed [2025-08-23 12:04:03][356923587547186][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:04:03][356923587547186][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:04:03][356923587547186][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:04:03][356923587547186][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:04:03][356923587547186][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:04:03][356923587547186][384 ms][DEBUG] START check_internet [2025-08-23 12:04:03][356923587547186][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.139/194.139/194.139/0.000 ms\n [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] check_internet: online [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] END check_internet in 453 ms [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:04:04][356923587547186][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923587547186\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1515\"}'\'' -e'"" [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:04:04][356923587547186][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923587547186\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1515\"}'\'' -e'"" [2025-08-23 12:04:08][356923587547186][5367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e1ff189-22f1-4f77-8f19-662f97907da5","id":"QR_3e1ff189-22f1-4f77-8f19-662f97907da5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:04:08][356923587547186][5523 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-08-23 12:04:08][356923587547186][5523 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-23 12:04:08][356923587547186][5523 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:06:03][352698474381899][0 ms][INFO] === Request start === [2025-08-23 12:06:03][352698474381899][1 ms][DEBUG] START check_scloud [2025-08-23 12:06:03][352698474381899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:06:03][352698474381899][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 22342 4968 24926468 236500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:06:03][352698474381899][322 ms][DEBUG] targetPkg: running [2025-08-23 12:06:03][352698474381899][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 12:06:03][352698474381899][322 ms][DEBUG] START check_boot_completed [2025-08-23 12:06:03][352698474381899][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:06:03][352698474381899][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:06:03][352698474381899][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:06:03][352698474381899][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:06:03][352698474381899][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:06:03][352698474381899][416 ms][DEBUG] START check_internet [2025-08-23 12:06:03][352698474381899][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.570/200.570/200.570/0.000 ms\n [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] check_internet: online [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] END check_internet in 313 ms [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:06:03][352698474381899][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698474381899\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5051\"}'\'' -e'"" [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:06:03][352698474381899][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698474381899\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5051\"}'\'' -e'"" [2025-08-23 12:06:07][352698474381899][4618 ms][DEBUG] proc_open done in 3890 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 12:06:07][352698474381899][4618 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-23 12:06:07][352698474381899][4618 ms][WARN] Detected error: Process with pid 22342 either refused to load frida-agent, or terminated during injection [2025-08-23 12:06:07][352698474381899][4618 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:06:07][352698474381899][4774 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 12:06:07][352698474381899][4774 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:06:07][352698474381899][4774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:06:07][352698474381899][4899 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 12:06:07][352698474381899][4899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:06:08][352698474381899][5055 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:06:10][352698474381899][7070 ms][DEBUG] START check_boot_completed [2025-08-23 12:06:10][352698474381899][7070 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:06:10][352698474381899][7117 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:06:10][352698474381899][7117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:06:10][352698474381899][7164 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:06:10][352698474381899][7164 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:06:13][352698474381899][10179 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:06:13][352698474381899][10179 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698474381899\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5051\"}'\'' -e'"" [2025-08-23 12:06:17][352698474381899][14459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af8a6529-fd79-460e-b018-cfa0e1e77964","id":"QR_af8a6529-fd79-460e-b018-cfa0e1e77964","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:06:17][352698474381899][14615 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 12:06:17][352698474381899][14615 ms][DEBUG] END runCmdUntilRes#2 in 4437 ms [2025-08-23 12:06:17][352698474381899][14615 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:11:03][356019746278639][1 ms][INFO] === Request start === [2025-08-23 12:11:03][356019746278639][2 ms][DEBUG] START check_scloud [2025-08-23 12:11:03][356019746278639][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:11:03][356019746278639][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 24497 4968 23708928 127060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:11:03][356019746278639][307 ms][DEBUG] targetPkg: running [2025-08-23 12:11:03][356019746278639][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 12:11:03][356019746278639][307 ms][DEBUG] START check_boot_completed [2025-08-23 12:11:03][356019746278639][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:11:03][356019746278639][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:11:03][356019746278639][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:11:03][356019746278639][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:11:03][356019746278639][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:11:03][356019746278639][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:11:03][356019746278639][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746278639\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2182\"}'\'' -e'"" [2025-08-23 12:11:03][356019746278639][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:11:03][356019746278639][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746278639\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2182\"}'\'' -e'"" [2025-08-23 12:11:08][356019746278639][4587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7200f87c-5cee-4935-a97f-9d259af2959d","id":"QR_7200f87c-5cee-4935-a97f-9d259af2959d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:11:08][356019746278639][4743 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-23 12:11:08][356019746278639][4743 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-23 12:11:08][356019746278639][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:12:03][351351023321492][0 ms][INFO] === Request start === [2025-08-23 12:12:03][351351023321492][1 ms][DEBUG] START check_scloud [2025-08-23 12:12:03][351351023321492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:12:03][351351023321492][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 24497 4968 23865700 137964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:12:03][351351023321492][299 ms][DEBUG] targetPkg: running [2025-08-23 12:12:03][351351023321492][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 12:12:03][351351023321492][299 ms][DEBUG] START check_boot_completed [2025-08-23 12:12:03][351351023321492][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:12:03][351351023321492][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:12:03][351351023321492][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:12:03][351351023321492][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:12:03][351351023321492][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:12:03][351351023321492][409 ms][DEBUG] START check_internet [2025-08-23 12:12:03][351351023321492][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:12:04][351351023321492][924 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.763/197.763/197.763/0.000 ms\n [2025-08-23 12:12:04][351351023321492][924 ms][DEBUG] check_internet: online [2025-08-23 12:12:04][351351023321492][924 ms][DEBUG] END check_internet in 515 ms [2025-08-23 12:12:04][351351023321492][924 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:12:04][351351023321492][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023321492\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8666\"}'\'' -e'"" [2025-08-23 12:12:04][351351023321492][925 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:12:04][351351023321492][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023321492\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8666\"}'\'' -e'"" [2025-08-23 12:12:08][351351023321492][4860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80939184-71d6-4b36-a753-5144f9903e47","id":"QR_80939184-71d6-4b36-a753-5144f9903e47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:12:08][351351023321492][5016 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-23 12:12:08][351351023321492][5017 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-23 12:12:08][351351023321492][5017 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:12:12][350250411931477][0 ms][INFO] === Request start === [2025-08-23 12:12:12][350250411931477][1 ms][DEBUG] START check_scloud [2025-08-23 12:12:12][350250411931477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:12:12][350250411931477][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 24497 4968 24025764 149512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:12:12][350250411931477][299 ms][DEBUG] targetPkg: running [2025-08-23 12:12:12][350250411931477][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 12:12:12][350250411931477][299 ms][DEBUG] START check_boot_completed [2025-08-23 12:12:12][350250411931477][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:12:12][350250411931477][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:12:12][350250411931477][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:12:12][350250411931477][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 12:12:12][350250411931477][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:12:12][350250411931477][408 ms][DEBUG] START check_internet [2025-08-23 12:12:12][350250411931477][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.608/246.608/246.608/0.000 ms\n [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] check_internet: online [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] END check_internet in 391 ms [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:12:12][350250411931477][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3210\"}'\'' -e'"" [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:12:12][350250411931477][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3210\"}'\'' -e'"" [2025-08-23 12:12:16][350250411931477][4579 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 12:12:16][350250411931477][4735 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-23 12:12:16][350250411931477][4735 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 12:12:16][350250411931477][4735 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 12:12:17][][0 ms][INFO] === Request start === [2025-08-23 12:12:17][][1 ms][DEBUG] START check_scloud [2025-08-23 12:12:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:12:17][][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24497 4968 24186540 160364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:12:17][][305 ms][DEBUG] targetPkg: running [2025-08-23 12:12:17][][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 12:12:17][][305 ms][DEBUG] START check_boot_completed [2025-08-23 12:12:17][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:12:17][][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:12:17][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:12:17][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:12:17][][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:12:17][][399 ms][DEBUG] START check_internet [2025-08-23 12:12:17][][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:12:17][][648 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.905/139.905/139.905/0.000 ms\n [2025-08-23 12:12:17][][648 ms][DEBUG] check_internet: online [2025-08-23 12:12:17][][648 ms][DEBUG] END check_internet in 250 ms [2025-08-23 12:12:17][][648 ms][DEBUG] rawBody.length=1129 [2025-08-23 12:12:17][][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX9157GNX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8578\"}'\'' -e'"" [2025-08-23 12:12:17][][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:12:17][][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX9157GNX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8578\"}'\'' -e'"" [2025-08-23 12:12:21][][4007 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 12:12:21][][4163 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=107 [2025-08-23 12:12:21][][4163 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-08-23 12:12:21][][4163 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 12:12:23][350250411931477][0 ms][INFO] === Request start === [2025-08-23 12:12:23][350250411931477][1 ms][DEBUG] START check_scloud [2025-08-23 12:12:23][350250411931477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:12:24][350250411931477][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 24497 4968 24298384 171360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:12:24][350250411931477][307 ms][DEBUG] targetPkg: running [2025-08-23 12:12:24][350250411931477][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 12:12:24][350250411931477][307 ms][DEBUG] START check_boot_completed [2025-08-23 12:12:24][350250411931477][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:12:24][350250411931477][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:12:24][350250411931477][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:12:24][350250411931477][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:12:24][350250411931477][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:12:24][350250411931477][416 ms][DEBUG] START check_internet [2025-08-23 12:12:24][350250411931477][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.234/264.234/264.234/0.000 ms\n [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] check_internet: online [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] END check_internet in 422 ms [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] rawBody.length=1149 [2025-08-23 12:12:24][350250411931477][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1162\"}'\'' -e'"" [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:12:24][350250411931477][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1162\"}'\'' -e'"" [2025-08-23 12:12:33][350250411931477][9461 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85ade620-3487-4a58-9347-d8c4354875d5","id":"QR_85ade620-3487-4a58-9347-d8c4354875d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:12:33][350250411931477][9617 ms][DEBUG] proc_open done in 8779 ms; code=255; res.len=3343 [2025-08-23 12:12:33][350250411931477][9617 ms][DEBUG] END runCmdUntilRes#1 in 8779 ms [2025-08-23 12:12:33][350250411931477][9617 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:13:03][356969641587494][0 ms][INFO] === Request start === [2025-08-23 12:13:03][356969641587494][1 ms][DEBUG] START check_scloud [2025-08-23 12:13:03][356969641587494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:13:03][356969641587494][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 24497 4968 24371244 183808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:13:03][356969641587494][288 ms][DEBUG] targetPkg: running [2025-08-23 12:13:03][356969641587494][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 12:13:03][356969641587494][288 ms][DEBUG] START check_boot_completed [2025-08-23 12:13:03][356969641587494][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:13:03][356969641587494][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:13:03][356969641587494][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:13:03][356969641587494][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:13:03][356969641587494][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:13:03][356969641587494][397 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:13:03][356969641587494][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969641587494\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-08-23 12:13:03][356969641587494][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:13:03][356969641587494][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969641587494\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-08-23 12:13:07][356969641587494][4396 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63576c0c-7304-4837-8e39-faafba6fb5df","id":"QR_63576c0c-7304-4837-8e39-faafba6fb5df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:13:07][356969641587494][4552 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-23 12:13:07][356969641587494][4552 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 12:13:07][356969641587494][4552 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:13:11][350039936064819][1 ms][INFO] === Request start === [2025-08-23 12:13:11][350039936064819][2 ms][DEBUG] START check_scloud [2025-08-23 12:13:11][350039936064819][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:13:12][350039936064819][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 24497 4968 24517940 194780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:13:12][350039936064819][257 ms][DEBUG] targetPkg: running [2025-08-23 12:13:12][350039936064819][257 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 12:13:12][350039936064819][257 ms][DEBUG] START check_boot_completed [2025-08-23 12:13:12][350039936064819][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:13:12][350039936064819][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:13:12][350039936064819][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:13:12][350039936064819][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:13:12][350039936064819][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:13:12][350039936064819][351 ms][DEBUG] rawBody.length=1149 [2025-08-23 12:13:12][350039936064819][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936064819\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6870\"}'\'' -e'"" [2025-08-23 12:13:12][350039936064819][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:13:12][350039936064819][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936064819\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6870\"}'\'' -e'"" [2025-08-23 12:13:18][350039936064819][6661 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23d945e2-a706-4d01-8a7a-4ebc49d820bd","id":"QR_23d945e2-a706-4d01-8a7a-4ebc49d820bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:13:18][350039936064819][6817 ms][DEBUG] proc_open done in 6467 ms; code=255; res.len=3343 [2025-08-23 12:13:18][350039936064819][6817 ms][DEBUG] END runCmdUntilRes#1 in 6467 ms [2025-08-23 12:13:18][350039936064819][6817 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:15:03][353310804398093][0 ms][INFO] === Request start === [2025-08-23 12:15:03][353310804398093][1 ms][DEBUG] START check_scloud [2025-08-23 12:15:03][353310804398093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:15:03][353310804398093][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 24497 4968 24629748 206868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:15:03][353310804398093][253 ms][DEBUG] targetPkg: running [2025-08-23 12:15:03][353310804398093][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-23 12:15:03][353310804398093][254 ms][DEBUG] START check_boot_completed [2025-08-23 12:15:03][353310804398093][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:15:03][353310804398093][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:15:03][353310804398093][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:15:03][353310804398093][362 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:15:03][353310804398093][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:15:03][353310804398093][363 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:15:03][353310804398093][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804398093\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5723\"}'\'' -e'"" [2025-08-23 12:15:03][353310804398093][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:15:03][353310804398093][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804398093\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5723\"}'\'' -e'"" [2025-08-23 12:15:08][353310804398093][4611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97e577fa-228a-4f00-ae38-8626adfcfffa","id":"QR_97e577fa-228a-4f00-ae38-8626adfcfffa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:15:08][353310804398093][4768 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 12:15:08][353310804398093][4768 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 12:15:08][353310804398093][4768 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:15:10][357962504652751][1 ms][INFO] === Request start === [2025-08-23 12:15:10][357962504652751][1 ms][DEBUG] START check_scloud [2025-08-23 12:15:10][357962504652751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:15:11][357962504652751][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 24497 4968 24766076 217660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:15:11][357962504652751][266 ms][DEBUG] targetPkg: running [2025-08-23 12:15:11][357962504652751][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 12:15:11][357962504652751][266 ms][DEBUG] START check_boot_completed [2025-08-23 12:15:11][357962504652751][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:15:11][357962504652751][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:15:11][357962504652751][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:15:11][357962504652751][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:15:11][357962504652751][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:15:11][357962504652751][376 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:15:11][357962504652751][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504652751\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1865\"}'\'' -e'"" [2025-08-23 12:15:11][357962504652751][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:15:11][357962504652751][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504652751\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1865\"}'\'' -e'"" [2025-08-23 12:15:15][357962504652751][4218 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_552cec2d-f38c-4fd0-b883-0deec361c62b","id":"QR_552cec2d-f38c-4fd0-b883-0deec361c62b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:15:15][357962504652751][4374 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-23 12:15:15][357962504652751][4374 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-23 12:15:15][357962504652751][4374 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:17:04][359897780985392][1 ms][INFO] === Request start === [2025-08-23 12:17:04][359897780985392][2 ms][DEBUG] START check_scloud [2025-08-23 12:17:04][359897780985392][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:17:04][359897780985392][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 24497 4968 24898236 229624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:17:04][359897780985392][304 ms][DEBUG] targetPkg: running [2025-08-23 12:17:04][359897780985392][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 12:17:04][359897780985392][304 ms][DEBUG] START check_boot_completed [2025-08-23 12:17:04][359897780985392][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:17:04][359897780985392][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:17:04][359897780985392][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:17:04][359897780985392][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 12:17:04][359897780985392][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 12:17:04][359897780985392][398 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:17:04][359897780985392][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359897780985392\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8912\"}'\'' -e'"" [2025-08-23 12:17:04][359897780985392][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:17:04][359897780985392][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359897780985392\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8912\"}'\'' -e'"" [2025-08-23 12:17:08][359897780985392][4989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b61a0947-9f8c-4c7c-9007-28482ddc4dc6","id":"QR_b61a0947-9f8c-4c7c-9007-28482ddc4dc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:17:09][359897780985392][5146 ms][DEBUG] proc_open done in 4747 ms; code=255; res.len=3343 [2025-08-23 12:17:09][359897780985392][5146 ms][DEBUG] END runCmdUntilRes#1 in 4747 ms [2025-08-23 12:17:09][359897780985392][5146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:17:11][355758534032432][0 ms][INFO] === Request start === [2025-08-23 12:17:11][355758534032432][1 ms][DEBUG] START check_scloud [2025-08-23 12:17:11][355758534032432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:17:12][355758534032432][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 24497 4968 25065352 240436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:17:12][355758534032432][306 ms][DEBUG] targetPkg: running [2025-08-23 12:17:12][355758534032432][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 12:17:12][355758534032432][306 ms][DEBUG] START check_boot_completed [2025-08-23 12:17:12][355758534032432][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:17:12][355758534032432][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:17:12][355758534032432][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:17:12][355758534032432][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:17:12][355758534032432][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:17:12][355758534032432][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:17:12][355758534032432][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355758534032432\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7016\"}'\'' -e'"" [2025-08-23 12:17:12][355758534032432][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:17:12][355758534032432][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355758534032432\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7016\"}'\'' -e'"" [2025-08-23 12:17:15][355758534032432][4055 ms][DEBUG] proc_open done in 3654 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 12:17:15][355758534032432][4055 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 12:17:15][355758534032432][4055 ms][WARN] Detected error: Process with pid 24497 either refused to load frida-agent, or terminated during injection [2025-08-23 12:17:15][355758534032432][4055 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:17:16][355758534032432][4211 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 12:17:16][355758534032432][4211 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:17:16][355758534032432][4211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:17:16][355758534032432][4336 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 12:17:16][355758534032432][4336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:17:16][355758534032432][4492 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:17:18][355758534032432][6507 ms][DEBUG] START check_boot_completed [2025-08-23 12:17:18][355758534032432][6507 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:17:18][355758534032432][6554 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:17:18][355758534032432][6554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:17:18][355758534032432][6601 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:17:18][355758534032432][6601 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:17:21][355758534032432][9616 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:17:21][355758534032432][9616 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355758534032432\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7016\"}'\'' -e'"" [2025-08-23 12:17:25][355758534032432][13318 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51e721dc-9c76-41fd-ad7f-04f61a3a9a28","id":"QR_51e721dc-9c76-41fd-ad7f-04f61a3a9a28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:17:25][355758534032432][13474 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 12:17:25][355758534032432][13475 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-23 12:17:25][355758534032432][13475 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:17:27][351684400362535][0 ms][INFO] === Request start === [2025-08-23 12:17:27][351684400362535][1 ms][DEBUG] START check_scloud [2025-08-23 12:17:27][351684400362535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:17:28][351684400362535][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 26133 4968 23766556 124624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:17:28][351684400362535][252 ms][DEBUG] targetPkg: running [2025-08-23 12:17:28][351684400362535][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-23 12:17:28][351684400362535][252 ms][DEBUG] START check_boot_completed [2025-08-23 12:17:28][351684400362535][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:17:28][351684400362535][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:17:28][351684400362535][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:17:28][351684400362535][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:17:28][351684400362535][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:17:28][351684400362535][345 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:17:28][351684400362535][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400362535\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4447\"}'\'' -e'"" [2025-08-23 12:17:28][351684400362535][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:17:28][351684400362535][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400362535\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4447\"}'\'' -e'"" [2025-08-23 12:17:31][351684400362535][4001 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b26c4d03-f5b8-4791-94ad-60f16f21fb91","id":"QR_b26c4d03-f5b8-4791-94ad-60f16f21fb91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:17:32][351684400362535][4157 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-23 12:17:32][351684400362535][4157 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-23 12:17:32][351684400362535][4157 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:18:04][352132621255566][0 ms][INFO] === Request start === [2025-08-23 12:18:04][352132621255566][1 ms][DEBUG] START check_scloud [2025-08-23 12:18:04][352132621255566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:18:04][352132621255566][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 26133 4968 23809400 138568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:18:04][352132621255566][307 ms][DEBUG] targetPkg: running [2025-08-23 12:18:04][352132621255566][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 12:18:04][352132621255566][307 ms][DEBUG] START check_boot_completed [2025-08-23 12:18:04][352132621255566][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:18:04][352132621255566][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:18:04][352132621255566][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:18:04][352132621255566][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:18:04][352132621255566][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:18:04][352132621255566][401 ms][DEBUG] START check_internet [2025-08-23 12:18:04][352132621255566][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.527/200.527/200.527/0.000 ms\n [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] check_internet: online [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] END check_internet in 501 ms [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:18:04][352132621255566][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132621255566\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9633\"}'\'' -e'"" [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:18:04][352132621255566][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132621255566\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9633\"}'\'' -e'"" [2025-08-23 12:18:08][352132621255566][4774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fed3519-abc0-49f3-8b16-f2d01ca441e6","id":"QR_0fed3519-abc0-49f3-8b16-f2d01ca441e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:18:08][352132621255566][4930 ms][DEBUG] proc_open done in 4028 ms; code=255; res.len=3343 [2025-08-23 12:18:08][352132621255566][4930 ms][DEBUG] END runCmdUntilRes#1 in 4028 ms [2025-08-23 12:18:08][352132621255566][4930 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:20:02][351671773415008][1 ms][INFO] === Request start === [2025-08-23 12:20:02][351671773415008][2 ms][DEBUG] START check_scloud [2025-08-23 12:20:02][351671773415008][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:20:03][351671773415008][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 26133 4968 23903504 149948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:20:03][351671773415008][305 ms][DEBUG] targetPkg: running [2025-08-23 12:20:03][351671773415008][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 12:20:03][351671773415008][305 ms][DEBUG] START check_boot_completed [2025-08-23 12:20:03][351671773415008][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:20:03][351671773415008][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:20:03][351671773415008][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:20:03][351671773415008][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 12:20:03][351671773415008][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 12:20:03][351671773415008][400 ms][DEBUG] START check_internet [2025-08-23 12:20:03][351671773415008][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.172/202.172/202.172/0.000 ms\n [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] check_internet: online [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] END check_internet in 436 ms [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:20:03][351671773415008][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4442\"}'\'' -e'"" [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:20:03][351671773415008][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4442\"}'\'' -e'"" [2025-08-23 12:20:07][351671773415008][4929 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c166f9e-eaa6-4239-ae03-fe882aa3cc4b","id":"QR_3c166f9e-eaa6-4239-ae03-fe882aa3cc4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:20:07][351671773415008][5085 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 12:20:07][351671773415008][5085 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 12:20:07][351671773415008][5085 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:21:03][350857483573878][0 ms][INFO] === Request start === [2025-08-23 12:21:03][350857483573878][1 ms][DEBUG] START check_scloud [2025-08-23 12:21:03][350857483573878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:21:04][350857483573878][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 26133 4968 24046068 161096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:21:04][350857483573878][298 ms][DEBUG] targetPkg: running [2025-08-23 12:21:04][350857483573878][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 12:21:04][350857483573878][298 ms][DEBUG] START check_boot_completed [2025-08-23 12:21:04][350857483573878][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:21:04][350857483573878][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:21:04][350857483573878][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:21:04][350857483573878][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:21:04][350857483573878][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:21:04][350857483573878][376 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:21:04][350857483573878][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857483573878\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3156\"}'\'' -e'"" [2025-08-23 12:21:04][350857483573878][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:21:04][350857483573878][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857483573878\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3156\"}'\'' -e'"" [2025-08-23 12:21:08][350857483573878][4406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7534a862-fc90-4312-ad17-34a1c24b868c","id":"QR_7534a862-fc90-4312-ad17-34a1c24b868c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:21:08][350857483573878][4562 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 12:21:08][350857483573878][4562 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 12:21:08][350857483573878][4562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:21:10][355902956195133][0 ms][INFO] === Request start === [2025-08-23 12:21:10][355902956195133][1 ms][DEBUG] START check_scloud [2025-08-23 12:21:10][355902956195133][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:21:10][355902956195133][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 26133 4968 24184508 172000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:21:10][355902956195133][314 ms][DEBUG] targetPkg: running [2025-08-23 12:21:10][355902956195133][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 12:21:10][355902956195133][314 ms][DEBUG] START check_boot_completed [2025-08-23 12:21:10][355902956195133][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:21:10][355902956195133][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:21:10][355902956195133][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:21:10][355902956195133][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:21:10][355902956195133][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:21:10][355902956195133][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:21:10][355902956195133][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902956195133\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1861\"}'\'' -e'"" [2025-08-23 12:21:10][355902956195133][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:21:10][355902956195133][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902956195133\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1861\"}'\'' -e'"" [2025-08-23 12:21:14][355902956195133][4329 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e364dd2-32a8-4675-87d5-43d8b3cee21b","id":"QR_2e364dd2-32a8-4675-87d5-43d8b3cee21b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:21:14][355902956195133][4485 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-23 12:21:14][355902956195133][4485 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-23 12:21:14][355902956195133][4486 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:21:18][354291425614788][0 ms][INFO] === Request start === [2025-08-23 12:21:18][354291425614788][1 ms][DEBUG] START check_scloud [2025-08-23 12:21:18][354291425614788][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:21:18][354291425614788][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 26133 4968 24304452 183748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:21:18][354291425614788][307 ms][DEBUG] targetPkg: running [2025-08-23 12:21:18][354291425614788][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 12:21:18][354291425614788][307 ms][DEBUG] START check_boot_completed [2025-08-23 12:21:18][354291425614788][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:21:18][354291425614788][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 12:21:18][354291425614788][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:21:18][354291425614788][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:21:18][354291425614788][398 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 12:21:18][354291425614788][398 ms][DEBUG] rawBody.length=1149 [2025-08-23 12:21:18][354291425614788][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425614788\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8889\"}'\'' -e'"" [2025-08-23 12:21:18][354291425614788][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:21:18][354291425614788][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425614788\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8889\"}'\'' -e'"" [2025-08-23 12:21:24][354291425614788][6303 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d50fe4cb-c267-4063-bd67-bc76e5d69d9b","id":"QR_d50fe4cb-c267-4063-bd67-bc76e5d69d9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:21:25][354291425614788][6459 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-08-23 12:21:25][354291425614788][6459 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-08-23 12:21:25][354291425614788][6459 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:24:03][354747951859147][1 ms][INFO] === Request start === [2025-08-23 12:24:03][354747951859147][2 ms][DEBUG] START check_scloud [2025-08-23 12:24:03][354747951859147][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:24:03][354747951859147][265 ms][DEBUG] SU: done in 263 ms; outu0_a118 26133 4968 24383392 194948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:24:03][354747951859147][265 ms][DEBUG] targetPkg: running [2025-08-23 12:24:03][354747951859147][265 ms][DEBUG] END check_scloud in 263 ms [2025-08-23 12:24:03][354747951859147][265 ms][DEBUG] START check_boot_completed [2025-08-23 12:24:03][354747951859147][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:24:03][354747951859147][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:24:03][354747951859147][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:24:03][354747951859147][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:24:03][354747951859147][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:24:03][354747951859147][343 ms][DEBUG] START check_internet [2025-08-23 12:24:03][354747951859147][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.185/203.185/203.185/0.000 ms\n [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] check_internet: online [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] END check_internet in 500 ms [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:24:03][354747951859147][843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951859147\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9537\"}'\'' -e'"" [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:24:03][354747951859147][843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951859147\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9537\"}'\'' -e'"" [2025-08-23 12:24:08][354747951859147][4998 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e19bf67b-a4a9-4076-8942-d7e6cd868f24","id":"QR_e19bf67b-a4a9-4076-8942-d7e6cd868f24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:24:08][354747951859147][5154 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 12:24:08][354747951859147][5154 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 12:24:08][354747951859147][5154 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:25:03][350839823730996][0 ms][INFO] === Request start === [2025-08-23 12:25:03][350839823730996][1 ms][DEBUG] START check_scloud [2025-08-23 12:25:03][350839823730996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:25:03][350839823730996][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 26133 4968 24501380 206904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:25:03][350839823730996][306 ms][DEBUG] targetPkg: running [2025-08-23 12:25:03][350839823730996][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 12:25:03][350839823730996][306 ms][DEBUG] START check_boot_completed [2025-08-23 12:25:03][350839823730996][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:25:03][350839823730996][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:25:03][350839823730996][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:25:03][350839823730996][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:25:03][350839823730996][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:25:03][350839823730996][399 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:25:03][350839823730996][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350839823730996\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-23 12:25:03][350839823730996][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:25:03][350839823730996][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350839823730996\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-23 12:25:07][350839823730996][4461 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f4254d7-229c-4e6b-b44a-ec69f82477e9","id":"QR_6f4254d7-229c-4e6b-b44a-ec69f82477e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:25:07][350839823730996][4617 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-23 12:25:07][350839823730996][4617 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 12:25:07][350839823730996][4617 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:26:03][350040127562017][0 ms][INFO] === Request start === [2025-08-23 12:26:03][350040127562017][1 ms][DEBUG] START check_scloud [2025-08-23 12:26:03][350040127562017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:26:04][350040127562017][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 26133 4968 24615208 217680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:26:04][350040127562017][307 ms][DEBUG] targetPkg: running [2025-08-23 12:26:04][350040127562017][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 12:26:04][350040127562017][307 ms][DEBUG] START check_boot_completed [2025-08-23 12:26:04][350040127562017][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:26:04][350040127562017][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:26:04][350040127562017][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:26:04][350040127562017][448 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 12:26:04][350040127562017][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 12:26:04][350040127562017][448 ms][DEBUG] START check_internet [2025-08-23 12:26:04][350040127562017][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.551/203.551/203.551/0.000 ms\n [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] check_internet: online [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] END check_internet in 547 ms [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:26:04][350040127562017][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127562017\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4021\"}'\'' -e'"" [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:26:04][350040127562017][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127562017\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4021\"}'\'' -e'"" [2025-08-23 12:26:08][350040127562017][5197 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e9be841-e0a4-43e3-ae7f-b0246a82ee7b","id":"QR_1e9be841-e0a4-43e3-ae7f-b0246a82ee7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:26:09][350040127562017][5353 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 12:26:09][350040127562017][5353 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 12:26:09][350040127562017][5353 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:26:11][350290811808669][1 ms][INFO] === Request start === [2025-08-23 12:26:11][350290811808669][2 ms][DEBUG] START check_scloud [2025-08-23 12:26:11][350290811808669][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:26:12][350290811808669][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 26133 4968 24753584 229492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:26:12][350290811808669][272 ms][DEBUG] targetPkg: running [2025-08-23 12:26:12][350290811808669][272 ms][DEBUG] END check_scloud in 270 ms [2025-08-23 12:26:12][350290811808669][272 ms][DEBUG] START check_boot_completed [2025-08-23 12:26:12][350290811808669][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:26:12][350290811808669][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:26:12][350290811808669][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:26:12][350290811808669][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:26:12][350290811808669][365 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:26:12][350290811808669][365 ms][DEBUG] START check_internet [2025-08-23 12:26:12][350290811808669][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:26:12][350290811808669][678 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.734/189.734/189.734/0.000 ms\n [2025-08-23 12:26:12][350290811808669][678 ms][DEBUG] check_internet: online [2025-08-23 12:26:12][350290811808669][678 ms][DEBUG] END check_internet in 312 ms [2025-08-23 12:26:12][350290811808669][678 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:26:12][350290811808669][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811808669\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2799\"}'\'' -e'"" [2025-08-23 12:26:12][350290811808669][678 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:26:12][350290811808669][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811808669\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2799\"}'\'' -e'"" [2025-08-23 12:26:16][350290811808669][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0a502e6-fdb8-4f54-a9e3-b198fc383268","id":"QR_d0a502e6-fdb8-4f54-a9e3-b198fc383268","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:26:16][350290811808669][4880 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 12:26:16][350290811808669][4880 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-23 12:26:16][350290811808669][4880 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:26:19][357962506720986][0 ms][INFO] === Request start === [2025-08-23 12:26:19][357962506720986][1 ms][DEBUG] START check_scloud [2025-08-23 12:26:19][357962506720986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:26:19][357962506720986][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 26133 4968 24923832 240540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:26:19][357962506720986][245 ms][DEBUG] targetPkg: running [2025-08-23 12:26:19][357962506720986][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-23 12:26:19][357962506720986][245 ms][DEBUG] START check_boot_completed [2025-08-23 12:26:19][357962506720986][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:26:19][357962506720986][290 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 12:26:19][357962506720986][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:26:19][357962506720986][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:26:19][357962506720986][337 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 12:26:19][357962506720986][337 ms][DEBUG] START check_internet [2025-08-23 12:26:19][357962506720986][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.126/233.126/233.126/0.000 ms\n [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] check_internet: online [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] END check_internet in 344 ms [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:26:19][357962506720986][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506720986\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:26:19][357962506720986][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506720986\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-08-23 12:26:23][357962506720986][4399 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 12:26:23][357962506720986][4399 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-23 12:26:23][357962506720986][4399 ms][WARN] Detected error: Process with pid 26133 either refused to load frida-agent, or terminated during injection [2025-08-23 12:26:23][357962506720986][4399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:26:23][357962506720986][4524 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 12:26:23][357962506720986][4524 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:26:23][357962506720986][4524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:26:23][357962506720986][4649 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 12:26:23][357962506720986][4649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:26:23][357962506720986][4789 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:26:25][357962506720986][6804 ms][DEBUG] START check_boot_completed [2025-08-23 12:26:25][357962506720986][6804 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:26:26][357962506720986][6851 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:26:26][357962506720986][6851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:26:26][357962506720986][6898 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:26:26][357962506720986][6898 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:26:29][357962506720986][9913 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:26:29][357962506720986][9913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506720986\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-08-23 12:26:32][357962506720986][13693 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ece7c7ff-d5e9-4ba7-b7ce-b529205243d5","id":"QR_ece7c7ff-d5e9-4ba7-b7ce-b529205243d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:26:33][357962506720986][13850 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 12:26:33][357962506720986][13850 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-08-23 12:26:33][357962506720986][13850 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:27:05][354886764564815][0 ms][INFO] === Request start === [2025-08-23 12:27:05][354886764564815][1 ms][DEBUG] START check_scloud [2025-08-23 12:27:05][354886764564815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:27:05][354886764564815][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 27443 4968 23635788 127400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:27:05][354886764564815][295 ms][DEBUG] targetPkg: running [2025-08-23 12:27:05][354886764564815][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 12:27:05][354886764564815][295 ms][DEBUG] START check_boot_completed [2025-08-23 12:27:05][354886764564815][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:27:05][354886764564815][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:27:05][354886764564815][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:27:05][354886764564815][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:27:05][354886764564815][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:27:05][354886764564815][405 ms][DEBUG] rawBody.length=1149 [2025-08-23 12:27:05][354886764564815][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354886764564815\",\"model\":\"SM-F946U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2822\"}'\'' -e'"" [2025-08-23 12:27:05][354886764564815][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:27:05][354886764564815][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354886764564815\",\"model\":\"SM-F946U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2822\"}'\'' -e'"" [2025-08-23 12:27:10][354886764564815][5747 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd62bd33-d867-4df2-b4b5-f1190a113cec","id":"QR_fd62bd33-d867-4df2-b4b5-f1190a113cec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:27:11][354886764564815][5903 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-08-23 12:27:11][354886764564815][5903 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-08-23 12:27:11][354886764564815][5903 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:27:16][350247870955526][0 ms][INFO] === Request start === [2025-08-23 12:27:16][350247870955526][1 ms][DEBUG] START check_scloud [2025-08-23 12:27:16][350247870955526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:27:16][350247870955526][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27443 4968 23778388 138248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:27:16][350247870955526][309 ms][DEBUG] targetPkg: running [2025-08-23 12:27:16][350247870955526][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 12:27:16][350247870955526][309 ms][DEBUG] START check_boot_completed [2025-08-23 12:27:16][350247870955526][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:27:16][350247870955526][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:27:16][350247870955526][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:27:16][350247870955526][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:27:16][350247870955526][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:27:16][350247870955526][403 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:27:16][350247870955526][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870955526\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5560\"}'\'' -e'"" [2025-08-23 12:27:16][350247870955526][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:27:16][350247870955526][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870955526\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5560\"}'\'' -e'"" [2025-08-23 12:27:21][350247870955526][4902 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_084ec138-1b62-457a-9420-ee924234d500","id":"QR_084ec138-1b62-457a-9420-ee924234d500","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:27:21][350247870955526][5058 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-23 12:27:21][350247870955526][5058 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-23 12:27:21][350247870955526][5058 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:30:03][355084250901936][1 ms][INFO] === Request start === [2025-08-23 12:30:03][355084250901936][2 ms][DEBUG] START check_scloud [2025-08-23 12:30:03][355084250901936][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:30:03][355084250901936][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 27443 4968 23879844 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:30:03][355084250901936][315 ms][DEBUG] targetPkg: running [2025-08-23 12:30:03][355084250901936][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 12:30:03][355084250901936][315 ms][DEBUG] START check_boot_completed [2025-08-23 12:30:03][355084250901936][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:30:03][355084250901936][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:30:03][355084250901936][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:30:03][355084250901936][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:30:03][355084250901936][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:30:03][355084250901936][394 ms][DEBUG] START check_internet [2025-08-23 12:30:03][355084250901936][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:30:04][355084250901936][846 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.550/201.550/201.550/0.000 ms\n [2025-08-23 12:30:04][355084250901936][847 ms][DEBUG] check_internet: online [2025-08-23 12:30:04][355084250901936][847 ms][DEBUG] END check_internet in 453 ms [2025-08-23 12:30:04][355084250901936][847 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:30:04][355084250901936][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9228\"}'\'' -e'"" [2025-08-23 12:30:04][355084250901936][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:30:04][355084250901936][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9228\"}'\'' -e'"" [2025-08-23 12:30:08][355084250901936][5033 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64e7ce10-4d6b-4293-a416-ca14cb65211f","id":"QR_64e7ce10-4d6b-4293-a416-ca14cb65211f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:30:08][355084250901936][5189 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-23 12:30:08][355084250901936][5189 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-23 12:30:08][355084250901936][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:32:05][356927266431398][1 ms][INFO] === Request start === [2025-08-23 12:32:05][356927266431398][2 ms][DEBUG] START check_scloud [2025-08-23 12:32:05][356927266431398][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:32:05][356927266431398][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 27443 4968 24038792 161144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:32:05][356927266431398][304 ms][DEBUG] targetPkg: running [2025-08-23 12:32:05][356927266431398][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 12:32:05][356927266431398][304 ms][DEBUG] START check_boot_completed [2025-08-23 12:32:05][356927266431398][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:32:05][356927266431398][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:32:05][356927266431398][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:32:05][356927266431398][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:32:05][356927266431398][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:32:05][356927266431398][413 ms][DEBUG] START check_internet [2025-08-23 12:32:05][356927266431398][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:32:06][356927266431398][788 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.113/258.113/258.113/0.000 ms\n [2025-08-23 12:32:06][356927266431398][789 ms][DEBUG] check_internet: online [2025-08-23 12:32:06][356927266431398][789 ms][DEBUG] END check_internet in 375 ms [2025-08-23 12:32:06][356927266431398][789 ms][DEBUG] rawBody.length=1149 [2025-08-23 12:32:06][356927266431398][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266431398\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2359\"}'\'' -e'"" [2025-08-23 12:32:06][356927266431398][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:32:06][356927266431398][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266431398\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2359\"}'\'' -e'"" [2025-08-23 12:32:12][356927266431398][6552 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb1e7ec2-1bc3-4f89-912a-48f3b8088320","id":"QR_cb1e7ec2-1bc3-4f89-912a-48f3b8088320","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:32:12][356927266431398][6708 ms][DEBUG] proc_open done in 5919 ms; code=255; res.len=3343 [2025-08-23 12:32:12][356927266431398][6708 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-23 12:32:12][356927266431398][6708 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:34:03][352397453761417][1 ms][INFO] === Request start === [2025-08-23 12:34:03][352397453761417][2 ms][DEBUG] START check_scloud [2025-08-23 12:34:03][352397453761417][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:34:03][352397453761417][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 27443 4968 24162924 172392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:34:03][352397453761417][303 ms][DEBUG] targetPkg: running [2025-08-23 12:34:03][352397453761417][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 12:34:03][352397453761417][303 ms][DEBUG] START check_boot_completed [2025-08-23 12:34:03][352397453761417][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:34:03][352397453761417][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:34:03][352397453761417][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:34:03][352397453761417][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:34:03][352397453761417][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:34:03][352397453761417][396 ms][DEBUG] START check_internet [2025-08-23 12:34:03][352397453761417][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.998/251.998/251.998/0.000 ms\n [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] check_internet: online [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] END check_internet in 360 ms [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:34:03][352397453761417][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453761417\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:34:03][352397453761417][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453761417\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-08-23 12:34:08][352397453761417][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5580c38-1ecb-481a-b787-4cec91003bbc","id":"QR_d5580c38-1ecb-481a-b787-4cec91003bbc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:34:08][352397453761417][5005 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 12:34:08][352397453761417][5005 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 12:34:08][352397453761417][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:36:03][350226695681137][0 ms][INFO] === Request start === [2025-08-23 12:36:03][350226695681137][0 ms][DEBUG] START check_scloud [2025-08-23 12:36:03][350226695681137][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:36:04][350226695681137][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 27443 4968 24300752 184448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:36:04][350226695681137][295 ms][DEBUG] targetPkg: running [2025-08-23 12:36:04][350226695681137][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 12:36:04][350226695681137][295 ms][DEBUG] START check_boot_completed [2025-08-23 12:36:04][350226695681137][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:36:04][350226695681137][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 12:36:04][350226695681137][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:36:04][350226695681137][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:36:04][350226695681137][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 12:36:04][350226695681137][374 ms][DEBUG] START check_internet [2025-08-23 12:36:04][350226695681137][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.479/201.479/201.479/0.000 ms\n [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] check_internet: online [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] END check_internet in 547 ms [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:36:04][350226695681137][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695681137\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7699\"}'\'' -e'"" [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:36:04][350226695681137][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695681137\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7699\"}'\'' -e'"" [2025-08-23 12:36:08][350226695681137][4982 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7541079-424a-43ab-a3ad-f09e5bb2470b","id":"QR_d7541079-424a-43ab-a3ad-f09e5bb2470b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:36:08][350226695681137][5138 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-23 12:36:08][350226695681137][5138 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 12:36:08][350226695681137][5138 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:37:03][352737400388204][0 ms][INFO] === Request start === [2025-08-23 12:37:03][352737400388204][1 ms][DEBUG] START check_scloud [2025-08-23 12:37:03][352737400388204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:37:03][352737400388204][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 27443 4968 24450484 195316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:37:03][352737400388204][308 ms][DEBUG] targetPkg: running [2025-08-23 12:37:03][352737400388204][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 12:37:03][352737400388204][309 ms][DEBUG] START check_boot_completed [2025-08-23 12:37:03][352737400388204][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:37:03][352737400388204][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:37:03][352737400388204][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:37:03][352737400388204][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:37:03][352737400388204][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:37:03][352737400388204][402 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:37:03][352737400388204][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737400388204\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2111\"}'\'' -e'"" [2025-08-23 12:37:03][352737400388204][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:37:03][352737400388204][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737400388204\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2111\"}'\'' -e'"" [2025-08-23 12:37:07][352737400388204][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89387b0a-fb22-4b9c-b476-1c49ce63d86e","id":"QR_89387b0a-fb22-4b9c-b476-1c49ce63d86e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:37:08][352737400388204][4713 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 12:37:08][352737400388204][4713 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 12:37:08][352737400388204][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:38:02][351723300609239][0 ms][INFO] === Request start === [2025-08-23 12:38:02][351723300609239][1 ms][DEBUG] START check_scloud [2025-08-23 12:38:02][351723300609239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:38:02][351723300609239][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 27443 4968 24554136 207284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:38:02][351723300609239][283 ms][DEBUG] targetPkg: running [2025-08-23 12:38:02][351723300609239][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 12:38:02][351723300609239][284 ms][DEBUG] START check_boot_completed [2025-08-23 12:38:02][351723300609239][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:38:02][351723300609239][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:38:02][351723300609239][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:38:02][351723300609239][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:38:02][351723300609239][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:38:02][351723300609239][392 ms][DEBUG] START check_internet [2025-08-23 12:38:02][351723300609239][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:38:02][351723300609239][814 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.356/299.356/299.356/0.000 ms\n [2025-08-23 12:38:02][351723300609239][815 ms][DEBUG] check_internet: online [2025-08-23 12:38:02][351723300609239][815 ms][DEBUG] END check_internet in 422 ms [2025-08-23 12:38:02][351723300609239][815 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:38:02][351723300609239][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8850\"}'\'' -e'"" [2025-08-23 12:38:02][351723300609239][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:38:02][351723300609239][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8850\"}'\'' -e'"" [2025-08-23 12:38:06][351723300609239][4673 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_906d1478-0800-426d-bf6d-20afbe85a4bc","id":"QR_906d1478-0800-426d-bf6d-20afbe85a4bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:38:06][351723300609239][4829 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-23 12:38:06][351723300609239][4829 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 12:38:06][351723300609239][4829 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:39:02][352859304070033][1 ms][INFO] === Request start === [2025-08-23 12:39:02][352859304070033][2 ms][DEBUG] START check_scloud [2025-08-23 12:39:02][352859304070033][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:39:03][352859304070033][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 27443 4968 24715132 218056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:39:03][352859304070033][299 ms][DEBUG] targetPkg: running [2025-08-23 12:39:03][352859304070033][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 12:39:03][352859304070033][299 ms][DEBUG] START check_boot_completed [2025-08-23 12:39:03][352859304070033][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:39:03][352859304070033][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:39:03][352859304070033][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:39:03][352859304070033][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:39:03][352859304070033][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:39:03][352859304070033][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:39:03][352859304070033][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859304070033\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5712\"}'\'' -e'"" [2025-08-23 12:39:03][352859304070033][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:39:03][352859304070033][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859304070033\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5712\"}'\'' -e'"" [2025-08-23 12:39:07][352859304070033][4485 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9ef4de6-1958-411b-9473-2431899c6397","id":"QR_d9ef4de6-1958-411b-9473-2431899c6397","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:39:07][352859304070033][4641 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 12:39:07][352859304070033][4641 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 12:39:07][352859304070033][4641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:39:10][352133644980933][0 ms][INFO] === Request start === [2025-08-23 12:39:10][352133644980933][1 ms][DEBUG] START check_scloud [2025-08-23 12:39:10][352133644980933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:39:10][352133644980933][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 27443 4968 24896644 229932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:39:10][352133644980933][316 ms][DEBUG] targetPkg: running [2025-08-23 12:39:10][352133644980933][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 12:39:10][352133644980933][316 ms][DEBUG] START check_boot_completed [2025-08-23 12:39:10][352133644980933][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:39:10][352133644980933][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:39:10][352133644980933][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:39:10][352133644980933][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:39:10][352133644980933][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:39:10][352133644980933][425 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:39:10][352133644980933][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133644980933\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2427\"}'\'' -e'"" [2025-08-23 12:39:10][352133644980933][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:39:10][352133644980933][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133644980933\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2427\"}'\'' -e'"" [2025-08-23 12:39:14][352133644980933][4596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29d92e17-ab2b-46e3-aa8d-09edef266531","id":"QR_29d92e17-ab2b-46e3-aa8d-09edef266531","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:39:14][352133644980933][4752 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-23 12:39:14][352133644980933][4752 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-23 12:39:14][352133644980933][4752 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:40:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:40:03][351272330527417][1 ms][DEBUG] START check_scloud [2025-08-23 12:40:03][351272330527417][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:40:04][351272330527417][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27443 4968 24998212 240968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:40:04][351272330527417][314 ms][DEBUG] targetPkg: running [2025-08-23 12:40:04][351272330527417][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 12:40:04][351272330527417][314 ms][DEBUG] START check_boot_completed [2025-08-23 12:40:04][351272330527417][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:40:04][351272330527417][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:40:04][351272330527417][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:40:04][351272330527417][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:40:04][351272330527417][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:40:04][351272330527417][408 ms][DEBUG] START check_internet [2025-08-23 12:40:04][351272330527417][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.959/201.959/201.959/0.000 ms\n [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] check_internet: online [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] END check_internet in 468 ms [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:40:04][351272330527417][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1306\"}'\'' -e'"" [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:40:04][351272330527417][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1306\"}'\'' -e'"" [2025-08-23 12:40:12][351272330527417][8718 ms][DEBUG] proc_open done in 7841 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 12:40:12][351272330527417][8718 ms][DEBUG] END runCmdUntilRes#1 in 7842 ms [2025-08-23 12:40:12][351272330527417][8718 ms][WARN] Detected error: Process with pid 27443 either refused to load frida-agent, or terminated during injection [2025-08-23 12:40:12][351272330527417][8718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:40:12][351272330527417][8936 ms][DEBUG] SU: done in 219 ms; out [2025-08-23 12:40:12][351272330527417][8936 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:40:12][351272330527417][8937 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:40:13][351272330527417][9202 ms][DEBUG] SU: done in 265 ms; out [2025-08-23 12:40:13][351272330527417][9202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:40:13][351272330527417][9639 ms][DEBUG] SU: done in 437 ms; out [2025-08-23 12:40:15][351272330527417][11654 ms][DEBUG] START check_boot_completed [2025-08-23 12:40:15][351272330527417][11654 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:40:15][351272330527417][11701 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:40:15][351272330527417][11701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:40:15][351272330527417][11748 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:40:15][351272330527417][11748 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:40:18][351272330527417][14763 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:40:18][351272330527417][14763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1306\"}'\'' -e'"" [2025-08-23 12:40:20][351272330527417][16341 ms][DEBUG] proc_open done in 1578 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 12:40:20][351272330527417][16341 ms][DEBUG] END runCmdUntilRes#2 in 1578 ms [2025-08-23 12:40:20][351272330527417][16341 ms][WARN] Detected error 2; Reboot the device [2025-08-23 12:40:20][351272330527417][16341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 12:40:20][351272330527417][16966 ms][DEBUG] SU: done in 624 ms; out [2025-08-23 12:40:33][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:40:33][350675291068505][1 ms][DEBUG] START check_scloud [2025-08-23 12:40:33][350675291068505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:40:33][350675291068505][34 ms][DEBUG] SU: done in 33 ms; out [2025-08-23 12:40:33][350675291068505][34 ms][WARN] targetPkg: not running, restarting [2025-08-23 12:40:33][350675291068505][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:40:33][350675291068505][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 12:40:33][350675291068505][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:40:33][350675291068505][97 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 12:40:35][350675291068505][2112 ms][DEBUG] END check_scloud in 2111 ms [2025-08-23 12:40:35][350675291068505][2112 ms][DEBUG] START check_boot_completed [2025-08-23 12:40:35][350675291068505][2112 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:41:03][351272330527417][1 ms][INFO] === Request start === [2025-08-23 12:41:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:41:22][350675291068505][2017 ms][DEBUG] START check_scloud [2025-08-23 12:41:22][350675291068505][2018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:41:23][350675291068505][2346 ms][DEBUG] SU: done in 328 ms; out [2025-08-23 12:41:23][350675291068505][2346 ms][WARN] targetPkg: not running, restarting [2025-08-23 12:41:23][350675291068505][2346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:41:23][350675291068505][2486 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 12:41:23][350675291068505][2486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:41:23][350675291068505][2658 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:41:25][350675291068505][4673 ms][DEBUG] END check_scloud in 2655 ms [2025-08-23 12:41:25][350675291068505][4673 ms][DEBUG] START check_boot_completed [2025-08-23 12:41:25][350675291068505][4673 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:41:27][350675291068505][6728 ms][DEBUG] ADB: done in 2055 ms; out [2025-08-23 12:41:27][350675291068505][6728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:41:27][350675291068505][6790 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:41:27][350675291068505][6790 ms][DEBUG] END check_boot_completed in 2117 ms [2025-08-23 12:41:27][350675291068505][6790 ms][DEBUG] rawBody.length=1147 [2025-08-23 12:41:27][350675291068505][6790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2708\"}'\'' -e'"" [2025-08-23 12:41:27][350675291068505][6790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:41:27][350675291068505][6790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2708\"}'\'' -e'"" [2025-08-23 12:41:31][350675291068505][10446 ms][DEBUG] proc_open done in 3656 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 12:41:31][350675291068505][10446 ms][DEBUG] END runCmdUntilRes#1 in 3656 ms [2025-08-23 12:41:31][350675291068505][10446 ms][WARN] Detected error: Process not found [2025-08-23 12:41:31][350675291068505][10446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:41:31][350675291068505][10727 ms][DEBUG] SU: done in 282 ms; out [2025-08-23 12:41:31][350675291068505][10727 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:41:31][350675291068505][10727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:41:31][350675291068505][10945 ms][DEBUG] SU: done in 218 ms; out [2025-08-23 12:41:31][350675291068505][10945 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:41:32][350675291068505][11336 ms][DEBUG] SU: done in 390 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:41:34][350675291068505][13351 ms][DEBUG] START check_boot_completed [2025-08-23 12:41:34][350675291068505][13351 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:41:34][350675291068505][13398 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:41:34][350675291068505][13398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:41:34][350675291068505][13476 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 12:41:34][350675291068505][13476 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 12:41:37][350675291068505][16491 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:41:37][350675291068505][16491 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2708\"}'\'' -e'"" [2025-08-23 12:41:43][350675291068505][23239 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 12:41:44][350675291068505][23395 ms][DEBUG] proc_open done in 6904 ms; code=255; res.len=115 [2025-08-23 12:41:44][350675291068505][23395 ms][DEBUG] END runCmdUntilRes#2 in 6905 ms [2025-08-23 12:41:44][350675291068505][23396 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 12:41:44][][0 ms][INFO] === Request start === [2025-08-23 12:41:44][][1 ms][DEBUG] START check_scloud [2025-08-23 12:41:44][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:41:44][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 7970 4970 23648628 117356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:41:44][][310 ms][DEBUG] targetPkg: running [2025-08-23 12:41:44][][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 12:41:44][][310 ms][DEBUG] START check_boot_completed [2025-08-23 12:41:44][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:41:44][][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 12:41:44][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:41:44][][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:41:44][][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 12:41:44][][403 ms][DEBUG] rawBody.length=1128 [2025-08-23 12:41:44][][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4051\"}'\'' -e'"" [2025-08-23 12:41:44][][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:41:44][][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4051\"}'\'' -e'"" [2025-08-23 12:42:04][351272330527417][1 ms][INFO] === Request start === [2025-08-23 12:42:21][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:43:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:43:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:44:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:44:20][350675291068505][1 ms][INFO] === Request start === [2025-08-23 12:45:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:45:21][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:46:03][351272330527417][1 ms][INFO] === Request start === [2025-08-23 12:46:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:47:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:47:20][350675291068505][1 ms][INFO] === Request start === [2025-08-23 12:48:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:48:20][350675291068505][1 ms][INFO] === Request start === [2025-08-23 12:49:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:49:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:50:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:50:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:51:03][351272330527417][1 ms][INFO] === Request start === [2025-08-23 12:51:21][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:52:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:52:20][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:53:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:53:20][350675291068505][1 ms][INFO] === Request start === [2025-08-23 12:54:03][351272330527417][1 ms][INFO] === Request start === [2025-08-23 12:54:03][351272330527417][2 ms][DEBUG] START check_scloud [2025-08-23 12:54:03][351272330527417][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:54:03][351272330527417][32 ms][DEBUG] SU: done in 30 ms; out [2025-08-23 12:54:03][351272330527417][32 ms][WARN] targetPkg: not running, restarting [2025-08-23 12:54:03][351272330527417][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:54:03][351272330527417][63 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 12:54:03][351272330527417][63 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:54:03][351272330527417][94 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 12:54:05][351272330527417][2109 ms][DEBUG] END check_scloud in 2107 ms [2025-08-23 12:54:05][351272330527417][2109 ms][DEBUG] START check_boot_completed [2025-08-23 12:54:05][351272330527417][2109 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:55:03][351272330527417][0 ms][INFO] === Request start === [2025-08-23 12:55:03][351272330527417][1 ms][DEBUG] START check_scloud [2025-08-23 12:55:03][351272330527417][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:55:03][351272330527417][307 ms][DEBUG] SU: done in 306 ms; out [2025-08-23 12:55:03][351272330527417][307 ms][WARN] targetPkg: not running, restarting [2025-08-23 12:55:03][351272330527417][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:55:03][351272330527417][432 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 12:55:03][351272330527417][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:55:03][351272330527417][588 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:55:05][351272330527417][2603 ms][DEBUG] END check_scloud in 2602 ms [2025-08-23 12:55:05][351272330527417][2603 ms][DEBUG] START check_boot_completed [2025-08-23 12:55:05][351272330527417][2603 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:55:07][351272330527417][4652 ms][DEBUG] ADB: done in 2049 ms; out [2025-08-23 12:55:07][351272330527417][4652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:55:07][351272330527417][4715 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:55:07][351272330527417][4715 ms][DEBUG] END check_boot_completed in 2112 ms [2025-08-23 12:55:07][351272330527417][4715 ms][DEBUG] rawBody.length=1148 [2025-08-23 12:55:07][351272330527417][4715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5440\"}'\'' -e'"" [2025-08-23 12:55:07][351272330527417][4715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:55:07][351272330527417][4715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5440\"}'\'' -e'"" [2025-08-23 12:55:11][351272330527417][8963 ms][DEBUG] proc_open done in 4248 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 12:55:11][351272330527417][8963 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 12:55:11][351272330527417][8964 ms][WARN] Detected error: Process not found [2025-08-23 12:55:11][351272330527417][8964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 12:55:12][351272330527417][9198 ms][DEBUG] SU: done in 234 ms; out [2025-08-23 12:55:12][351272330527417][9198 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 12:55:12][351272330527417][9198 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 12:55:12][351272330527417][9354 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 12:55:12][351272330527417][9354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 12:55:12][351272330527417][9745 ms][DEBUG] SU: done in 391 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 12:55:14][351272330527417][11760 ms][DEBUG] START check_boot_completed [2025-08-23 12:55:14][351272330527417][11760 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:55:14][351272330527417][11807 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:55:14][351272330527417][11807 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:55:14][351272330527417][11869 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:55:14][351272330527417][11869 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:55:17][351272330527417][14884 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 12:55:17][351272330527417][14884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330527417\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5440\"}'\'' -e'"" [2025-08-23 12:55:26][351272330527417][23538 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a22f971a-6681-44a0-bf23-ec202d83f83d","id":"QR_a22f971a-6681-44a0-bf23-ec202d83f83d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 12:55:26][351272330527417][23694 ms][DEBUG] proc_open done in 8810 ms; code=255; res.len=3343 [2025-08-23 12:55:26][351272330527417][23694 ms][DEBUG] END runCmdUntilRes#2 in 8810 ms [2025-08-23 12:55:26][351272330527417][23694 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 12:55:28][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:55:28][350675291068505][1 ms][DEBUG] START check_scloud [2025-08-23 12:55:28][350675291068505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:55:28][350675291068505][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 8065 4967 23663612 106148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:55:28][350675291068505][333 ms][DEBUG] targetPkg: running [2025-08-23 12:55:28][350675291068505][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-23 12:55:28][350675291068505][333 ms][DEBUG] START check_boot_completed [2025-08-23 12:55:28][350675291068505][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:55:28][350675291068505][380 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:55:28][350675291068505][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:55:28][350675291068505][442 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 12:55:28][350675291068505][443 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 12:55:28][350675291068505][443 ms][DEBUG] rawBody.length=1147 [2025-08-23 12:55:28][350675291068505][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-08-23 12:55:28][350675291068505][443 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:55:28][350675291068505][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-08-23 12:55:33][350675291068505][5316 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 12:55:33][350675291068505][5472 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=115 [2025-08-23 12:55:33][350675291068505][5472 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-08-23 12:55:33][350675291068505][5473 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 12:55:34][][0 ms][INFO] === Request start === [2025-08-23 12:55:34][][1 ms][DEBUG] START check_scloud [2025-08-23 12:55:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 12:55:34][][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 8065 4967 23849284 89820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 12:55:34][][333 ms][DEBUG] targetPkg: running [2025-08-23 12:55:34][][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-23 12:55:34][][333 ms][DEBUG] START check_boot_completed [2025-08-23 12:55:34][][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 12:55:34][][379 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 12:55:34][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 12:55:34][][426 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 12:55:34][][426 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 12:55:34][][426 ms][DEBUG] rawBody.length=1128 [2025-08-23 12:55:34][][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4343\"}'\'' -e'"" [2025-08-23 12:55:34][][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 12:55:34][][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4343\"}'\'' -e'"" [2025-08-23 12:56:02][350675291068505][1 ms][INFO] === Request start === [2025-08-23 12:56:20][351247578801971][0 ms][INFO] === Request start === [2025-08-23 12:57:02][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:57:20][351247578801971][1 ms][INFO] === Request start === [2025-08-23 12:58:02][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:58:21][351247578801971][0 ms][INFO] === Request start === [2025-08-23 12:59:02][350675291068505][0 ms][INFO] === Request start === [2025-08-23 12:59:20][351247578801971][0 ms][INFO] === Request start === [2025-08-23 13:00:03][350675291068505][0 ms][INFO] === Request start === [2025-08-23 13:00:21][351247578801971][1 ms][INFO] === Request start === [2025-08-23 13:01:01][350675291068505][0 ms][INFO] === Request start === [2025-08-23 13:01:20][351247578801971][0 ms][INFO] === Request start === [2025-08-23 13:02:02][350675291068505][0 ms][INFO] === Request start === [2025-08-23 13:02:21][351247578801971][0 ms][INFO] === Request start === [2025-08-23 13:03:02][350675291068505][1 ms][INFO] === Request start === [2025-08-23 13:03:20][351247578801971][0 ms][INFO] === Request start === [2025-08-23 13:04:02][350675291068505][0 ms][INFO] === Request start === [2025-08-23 13:04:02][350675291068505][0 ms][DEBUG] START check_scloud [2025-08-23 13:04:02][350675291068505][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:04:02][350675291068505][340 ms][DEBUG] SU: done in 340 ms; out [2025-08-23 13:04:02][350675291068505][340 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:04:02][350675291068505][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:04:02][350675291068505][465 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:04:02][350675291068505][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:04:02][350675291068505][652 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:04:04][350675291068505][2668 ms][DEBUG] END check_scloud in 2668 ms [2025-08-23 13:04:04][350675291068505][2668 ms][DEBUG] START check_boot_completed [2025-08-23 13:04:04][350675291068505][2668 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:04:05][350675291068505][2715 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:04:05][350675291068505][2715 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:04:05][350675291068505][2777 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:04:05][350675291068505][2777 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:04:05][350675291068505][2777 ms][DEBUG] START check_internet [2025-08-23 13:04:05][350675291068505][2777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:04:05][350675291068505][3232 ms][DEBUG] SU: done in 455 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.708/202.708/202.708/0.000 ms\n [2025-08-23 13:04:05][350675291068505][3232 ms][DEBUG] check_internet: online [2025-08-23 13:04:05][350675291068505][3232 ms][DEBUG] END check_internet in 455 ms [2025-08-23 13:04:05][350675291068505][3232 ms][DEBUG] rawBody.length=1147 [2025-08-23 13:04:05][350675291068505][3232 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4330\"}'\'' -e'"" [2025-08-23 13:04:05][350675291068505][3233 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:04:05][350675291068505][3233 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350675291068505\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4330\"}'\'' -e'"" [2025-08-23 13:04:10][350675291068505][8042 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:04:10][350675291068505][8199 ms][DEBUG] proc_open done in 4966 ms; code=255; res.len=115 [2025-08-23 13:04:10][350675291068505][8199 ms][DEBUG] END runCmdUntilRes#1 in 4966 ms [2025-08-23 13:04:10][350675291068505][8199 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:04:10][][0 ms][INFO] === Request start === [2025-08-23 13:04:10][][1 ms][DEBUG] START check_scloud [2025-08-23 13:04:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:04:11][][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 21578 11396 23671224 124304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:04:11][][280 ms][DEBUG] targetPkg: running [2025-08-23 13:04:11][][280 ms][DEBUG] END check_scloud in 280 ms [2025-08-23 13:04:11][][280 ms][DEBUG] START check_boot_completed [2025-08-23 13:04:11][][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:04:11][][325 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 13:04:11][][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:04:11][][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:04:11][][372 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 13:04:11][][372 ms][DEBUG] START check_internet [2025-08-23 13:04:11][][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:04:11][][606 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.941/136.941/136.941/0.000 ms\n [2025-08-23 13:04:11][][606 ms][DEBUG] check_internet: online [2025-08-23 13:04:11][][606 ms][DEBUG] END check_internet in 234 ms [2025-08-23 13:04:11][][606 ms][DEBUG] rawBody.length=1128 [2025-08-23 13:04:11][][606 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4692\"}'\'' -e'"" [2025-08-23 13:04:11][][606 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:04:11][][606 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T575\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N91C206D\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4692\"}'\'' -e'"" [2025-08-23 13:04:15][][4294 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:04:15][][4450 ms][DEBUG] proc_open done in 3844 ms; code=255; res.len=115 [2025-08-23 13:04:15][][4450 ms][DEBUG] END runCmdUntilRes#1 in 3844 ms [2025-08-23 13:04:15][][4450 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:04:17][351247578801971][0 ms][INFO] === Request start === [2025-08-23 13:04:17][351247578801971][1 ms][DEBUG] START check_scloud [2025-08-23 13:04:17][351247578801971][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:04:17][351247578801971][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 21578 11396 23846464 135836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:04:17][351247578801971][322 ms][DEBUG] targetPkg: running [2025-08-23 13:04:17][351247578801971][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 13:04:17][351247578801971][322 ms][DEBUG] START check_boot_completed [2025-08-23 13:04:17][351247578801971][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:04:17][351247578801971][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:04:17][351247578801971][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:04:17][351247578801971][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:04:17][351247578801971][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:04:17][351247578801971][415 ms][DEBUG] START check_internet [2025-08-23 13:04:17][351247578801971][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:04:17][351247578801971][807 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.757/259.757/259.757/0.000 ms\n [2025-08-23 13:04:17][351247578801971][807 ms][DEBUG] check_internet: online [2025-08-23 13:04:17][351247578801971][807 ms][DEBUG] END check_internet in 392 ms [2025-08-23 13:04:17][351247578801971][807 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:04:17][351247578801971][807 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247578801971\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-23 13:04:17][351247578801971][807 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:04:17][351247578801971][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247578801971\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-23 13:04:21][351247578801971][4603 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2d7895a-3b06-4494-a7b4-1a0259dde523","id":"QR_e2d7895a-3b06-4494-a7b4-1a0259dde523","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:04:21][351247578801971][4759 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-23 13:04:21][351247578801971][4759 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-23 13:04:21][351247578801971][4759 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:04:24][350250419000614][0 ms][INFO] === Request start === [2025-08-23 13:04:24][350250419000614][1 ms][DEBUG] START check_scloud [2025-08-23 13:04:24][350250419000614][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:04:24][350250419000614][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 21578 11396 24018900 149436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:04:24][350250419000614][320 ms][DEBUG] targetPkg: running [2025-08-23 13:04:24][350250419000614][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 13:04:24][350250419000614][320 ms][DEBUG] START check_boot_completed [2025-08-23 13:04:24][350250419000614][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:04:24][350250419000614][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:04:24][350250419000614][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:04:24][350250419000614][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:04:24][350250419000614][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:04:24][350250419000614][413 ms][DEBUG] START check_internet [2025-08-23 13:04:24][350250419000614][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.130/136.130/136.130/0.000 ms\n [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] check_internet: online [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] END check_internet in 235 ms [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:04:25][350250419000614][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250419000614\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7246\"}'\'' -e'"" [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:04:25][350250419000614][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250419000614\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7246\"}'\'' -e'"" [2025-08-23 13:04:28][350250419000614][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b98e0b8-06ca-4838-82dd-070608ec8d73","id":"QR_6b98e0b8-06ca-4838-82dd-070608ec8d73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:04:28][350250419000614][4507 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 13:04:28][350250419000614][4507 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 13:04:28][350250419000614][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:04:31][352029119193236][0 ms][INFO] === Request start === [2025-08-23 13:04:31][352029119193236][1 ms][DEBUG] START check_scloud [2025-08-23 13:04:31][352029119193236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:04:31][352029119193236][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 21578 11396 24112212 160724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:04:31][352029119193236][267 ms][DEBUG] targetPkg: running [2025-08-23 13:04:31][352029119193236][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-23 13:04:31][352029119193236][267 ms][DEBUG] START check_boot_completed [2025-08-23 13:04:31][352029119193236][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:04:31][352029119193236][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:04:31][352029119193236][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:04:31][352029119193236][377 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 13:04:31][352029119193236][377 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:04:31][352029119193236][377 ms][DEBUG] START check_internet [2025-08-23 13:04:31][352029119193236][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:04:32][352029119193236][845 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.821/200.821/200.821/0.000 ms\n [2025-08-23 13:04:32][352029119193236][845 ms][DEBUG] check_internet: online [2025-08-23 13:04:32][352029119193236][846 ms][DEBUG] END check_internet in 469 ms [2025-08-23 13:04:32][352029119193236][846 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:04:32][352029119193236][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352029119193236\",\"model\":\"SM-A705F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2094\"}'\'' -e'"" [2025-08-23 13:04:32][352029119193236][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:04:32][352029119193236][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352029119193236\",\"model\":\"SM-A705F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2094\"}'\'' -e'"" [2025-08-23 13:04:36][352029119193236][4626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08d42c64-9462-452e-a59b-1ddcd9c0f394","id":"QR_08d42c64-9462-452e-a59b-1ddcd9c0f394","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:04:36][352029119193236][4782 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 13:04:36][352029119193236][4782 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 13:04:36][352029119193236][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:05:03][352749382836514][1 ms][INFO] === Request start === [2025-08-23 13:05:03][352749382836514][1 ms][DEBUG] START check_scloud [2025-08-23 13:05:03][352749382836514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:05:04][352749382836514][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 21578 11396 24133504 171764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:05:04][352749382836514][293 ms][DEBUG] targetPkg: running [2025-08-23 13:05:04][352749382836514][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-23 13:05:04][352749382836514][293 ms][DEBUG] START check_boot_completed [2025-08-23 13:05:04][352749382836514][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:05:04][352749382836514][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:05:04][352749382836514][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:05:04][352749382836514][386 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:05:04][352749382836514][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:05:04][352749382836514][386 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:05:04][352749382836514][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382836514\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7920\"}'\'' -e'"" [2025-08-23 13:05:04][352749382836514][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:05:04][352749382836514][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382836514\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7920\"}'\'' -e'"" [2025-08-23 13:05:10][352749382836514][6447 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b5d9132-bd35-4b8b-bfd7-18f19f44eeb2","id":"QR_7b5d9132-bd35-4b8b-bfd7-18f19f44eeb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:05:10][352749382836514][6604 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-08-23 13:05:10][352749382836514][6604 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-08-23 13:05:10][352749382836514][6604 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:05:15][353310803767942][0 ms][INFO] === Request start === [2025-08-23 13:05:15][353310803767942][1 ms][DEBUG] START check_scloud [2025-08-23 13:05:15][353310803767942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:05:15][353310803767942][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 21578 11396 24257672 183620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:05:15][353310803767942][309 ms][DEBUG] targetPkg: running [2025-08-23 13:05:15][353310803767942][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 13:05:15][353310803767942][309 ms][DEBUG] START check_boot_completed [2025-08-23 13:05:15][353310803767942][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:05:15][353310803767942][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:05:15][353310803767942][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:05:15][353310803767942][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:05:15][353310803767942][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:05:15][353310803767942][403 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:05:15][353310803767942][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803767942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3125\"}'\'' -e'"" [2025-08-23 13:05:15][353310803767942][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:05:15][353310803767942][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803767942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3125\"}'\'' -e'"" [2025-08-23 13:05:20][353310803767942][4792 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff0589d8-8770-47e9-9a6d-bf89abf5ef11","id":"QR_ff0589d8-8770-47e9-9a6d-bf89abf5ef11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:05:20][353310803767942][4949 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-08-23 13:05:20][353310803767942][4949 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-08-23 13:05:20][353310803767942][4949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:05:22][351240641853053][0 ms][INFO] === Request start === [2025-08-23 13:05:22][351240641853053][1 ms][DEBUG] START check_scloud [2025-08-23 13:05:22][351240641853053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:05:23][351240641853053][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21578 11396 24383632 194400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:05:23][351240641853053][314 ms][DEBUG] targetPkg: running [2025-08-23 13:05:23][351240641853053][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 13:05:23][351240641853053][314 ms][DEBUG] START check_boot_completed [2025-08-23 13:05:23][351240641853053][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:05:23][351240641853053][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:05:23][351240641853053][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:05:23][351240641853053][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:05:23][351240641853053][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:05:23][351240641853053][423 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:05:23][351240641853053][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641853053\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2765\"}'\'' -e'"" [2025-08-23 13:05:23][351240641853053][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:05:23][351240641853053][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641853053\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2765\"}'\'' -e'"" [2025-08-23 13:05:27][351240641853053][4219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0836e30-bbe8-4f23-911c-6556f123c8bb","id":"QR_c0836e30-bbe8-4f23-911c-6556f123c8bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:05:27][351240641853053][4375 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-23 13:05:27][351240641853053][4375 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 13:05:27][351240641853053][4375 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:05:29][352967354074910][0 ms][INFO] === Request start === [2025-08-23 13:05:29][352967354074910][1 ms][DEBUG] START check_scloud [2025-08-23 13:05:29][352967354074910][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:05:30][352967354074910][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 21578 11396 24511732 206228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:05:30][352967354074910][329 ms][DEBUG] targetPkg: running [2025-08-23 13:05:30][352967354074910][329 ms][DEBUG] END check_scloud in 329 ms [2025-08-23 13:05:30][352967354074910][329 ms][DEBUG] START check_boot_completed [2025-08-23 13:05:30][352967354074910][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:05:30][352967354074910][376 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:05:30][352967354074910][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:05:30][352967354074910][424 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 13:05:30][352967354074910][424 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 13:05:30][352967354074910][424 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:05:30][352967354074910][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354074910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6321\"}'\'' -e'"" [2025-08-23 13:05:30][352967354074910][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:05:30][352967354074910][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354074910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6321\"}'\'' -e'"" [2025-08-23 13:05:34][352967354074910][4250 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdee306d-fa85-4360-8866-dccb9f9dc5c9","id":"QR_fdee306d-fa85-4360-8866-dccb9f9dc5c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:05:34][352967354074910][4406 ms][DEBUG] proc_open done in 3981 ms; code=255; res.len=3343 [2025-08-23 13:05:34][352967354074910][4406 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-08-23 13:05:34][352967354074910][4406 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:06:04][357211246297016][0 ms][INFO] === Request start === [2025-08-23 13:06:04][357211246297016][1 ms][DEBUG] START check_scloud [2025-08-23 13:06:04][357211246297016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:06:04][357211246297016][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 21578 11396 24579396 217408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:06:04][357211246297016][318 ms][DEBUG] targetPkg: running [2025-08-23 13:06:04][357211246297016][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 13:06:04][357211246297016][318 ms][DEBUG] START check_boot_completed [2025-08-23 13:06:04][357211246297016][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:06:04][357211246297016][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:06:04][357211246297016][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:06:04][357211246297016][443 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 13:06:04][357211246297016][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 13:06:04][357211246297016][443 ms][DEBUG] START check_internet [2025-08-23 13:06:04][357211246297016][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.136/205.136/205.136/0.000 ms\n [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] check_internet: online [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] END check_internet in 516 ms [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:06:05][357211246297016][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246297016\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3430\"}'\'' -e'"" [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:06:05][357211246297016][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246297016\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3430\"}'\'' -e'"" [2025-08-23 13:06:09][357211246297016][5004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfa4b055-8b75-4b69-aa62-57e39d0308ac","id":"QR_cfa4b055-8b75-4b69-aa62-57e39d0308ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:06:09][357211246297016][5161 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 13:06:09][357211246297016][5161 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 13:06:09][357211246297016][5161 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:06:11][357950542600361][0 ms][INFO] === Request start === [2025-08-23 13:06:11][357950542600361][0 ms][DEBUG] START check_scloud [2025-08-23 13:06:11][357950542600361][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:06:12][357950542600361][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 21578 11396 24760780 229148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:06:12][357950542600361][315 ms][DEBUG] targetPkg: running [2025-08-23 13:06:12][357950542600361][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 13:06:12][357950542600361][315 ms][DEBUG] START check_boot_completed [2025-08-23 13:06:12][357950542600361][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:06:12][357950542600361][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:06:12][357950542600361][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:06:12][357950542600361][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:06:12][357950542600361][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:06:12][357950542600361][424 ms][DEBUG] START check_internet [2025-08-23 13:06:12][357950542600361][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:06:12][357950542600361][830 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.789/253.789/253.789/0.000 ms\n [2025-08-23 13:06:12][357950542600361][830 ms][DEBUG] check_internet: online [2025-08-23 13:06:12][357950542600361][830 ms][DEBUG] END check_internet in 406 ms [2025-08-23 13:06:12][357950542600361][830 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:06:12][357950542600361][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542600361\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4501\"}'\'' -e'"" [2025-08-23 13:06:12][357950542600361][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:06:12][357950542600361][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542600361\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4501\"}'\'' -e'"" [2025-08-23 13:06:16][357950542600361][4766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5a90d60-efd0-4e93-b9d1-9baae5f1ca3e","id":"QR_b5a90d60-efd0-4e93-b9d1-9baae5f1ca3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:06:16][357950542600361][4923 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-23 13:06:16][357950542600361][4923 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-23 13:06:16][357950542600361][4923 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:06:19][354916446790478][0 ms][INFO] === Request start === [2025-08-23 13:06:19][354916446790478][1 ms][DEBUG] START check_scloud [2025-08-23 13:06:19][354916446790478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:06:19][354916446790478][236 ms][DEBUG] SU: done in 236 ms; outu0_a118 21578 11396 24903252 241068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:06:19][354916446790478][236 ms][DEBUG] targetPkg: running [2025-08-23 13:06:19][354916446790478][237 ms][DEBUG] END check_scloud in 236 ms [2025-08-23 13:06:19][354916446790478][237 ms][DEBUG] START check_boot_completed [2025-08-23 13:06:19][354916446790478][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:06:19][354916446790478][283 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:06:19][354916446790478][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:06:19][354916446790478][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:06:19][354916446790478][330 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:06:19][354916446790478][330 ms][DEBUG] START check_internet [2025-08-23 13:06:19][354916446790478][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.723/230.723/230.723/0.000 ms\n [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] check_internet: online [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] END check_internet in 328 ms [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:06:20][354916446790478][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446790478\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:06:20][354916446790478][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446790478\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-08-23 13:06:24][354916446790478][4876 ms][DEBUG] proc_open done in 4218 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:06:24][354916446790478][4876 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 13:06:24][354916446790478][4876 ms][WARN] Detected error: Process with pid 21578 either refused to load frida-agent, or terminated during injection [2025-08-23 13:06:24][354916446790478][4876 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:06:24][354916446790478][5016 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 13:06:24][354916446790478][5016 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:06:24][354916446790478][5016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:06:24][354916446790478][5141 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:06:24][354916446790478][5142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:06:24][354916446790478][5313 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:06:26][354916446790478][7328 ms][DEBUG] START check_boot_completed [2025-08-23 13:06:26][354916446790478][7328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:06:26][354916446790478][7375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:06:26][354916446790478][7375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:06:26][354916446790478][7423 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 13:06:26][354916446790478][7423 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 13:06:29][354916446790478][10437 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:06:29][354916446790478][10437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446790478\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-08-23 13:06:33][354916446790478][14655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5852f907-d5ee-4477-9f16-911c9354b684","id":"QR_5852f907-d5ee-4477-9f16-911c9354b684","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:06:34][354916446790478][14811 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 13:06:34][354916446790478][14811 ms][DEBUG] END runCmdUntilRes#2 in 4374 ms [2025-08-23 13:06:34][354916446790478][14811 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:07:03][359468678421153][1 ms][INFO] === Request start === [2025-08-23 13:07:03][359468678421153][1 ms][DEBUG] START check_scloud [2025-08-23 13:07:03][359468678421153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:07:03][359468678421153][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 23133 11396 23595156 126984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:07:03][359468678421153][302 ms][DEBUG] targetPkg: running [2025-08-23 13:07:03][359468678421153][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 13:07:03][359468678421153][302 ms][DEBUG] START check_boot_completed [2025-08-23 13:07:03][359468678421153][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:07:03][359468678421153][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 13:07:03][359468678421153][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:07:03][359468678421153][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:07:03][359468678421153][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 13:07:03][359468678421153][395 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:07:03][359468678421153][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678421153\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9649\"}'\'' -e'"" [2025-08-23 13:07:03][359468678421153][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:07:03][359468678421153][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678421153\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9649\"}'\'' -e'"" [2025-08-23 13:07:07][359468678421153][4534 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22d4398b-58a3-46f0-ac5f-00527495aa01","id":"QR_22d4398b-58a3-46f0-ac5f-00527495aa01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:07:07][359468678421153][4690 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 13:07:07][359468678421153][4690 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 13:07:07][359468678421153][4690 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:07:36][354203113263166][0 ms][INFO] === Request start === [2025-08-23 13:07:36][354203113263166][1 ms][DEBUG] START check_scloud [2025-08-23 13:07:36][354203113263166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:07:37][354203113263166][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 23133 11396 23723064 137372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:07:37][354203113263166][290 ms][DEBUG] targetPkg: running [2025-08-23 13:07:37][354203113263166][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 13:07:37][354203113263166][290 ms][DEBUG] START check_boot_completed [2025-08-23 13:07:37][354203113263166][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:07:37][354203113263166][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:07:37][354203113263166][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:07:37][354203113263166][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:07:37][354203113263166][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:07:37][354203113263166][399 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:07:37][354203113263166][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9792\"}'\'' -e'"" [2025-08-23 13:07:37][354203113263166][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:07:37][354203113263166][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9792\"}'\'' -e'"" [2025-08-23 13:07:40][354203113263166][4133 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:07:41][354203113263166][4289 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=107 [2025-08-23 13:07:41][354203113263166][4289 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-23 13:07:41][354203113263166][4289 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:07:41][][0 ms][INFO] === Request start === [2025-08-23 13:07:41][][1 ms][DEBUG] START check_scloud [2025-08-23 13:07:41][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:07:41][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23133 11396 23863552 149060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:07:41][][310 ms][DEBUG] targetPkg: running [2025-08-23 13:07:41][][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 13:07:41][][310 ms][DEBUG] START check_boot_completed [2025-08-23 13:07:41][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:07:41][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:07:41][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:07:41][][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:07:41][][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:07:41][][419 ms][DEBUG] rawBody.length=1129 [2025-08-23 13:07:41][][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN308P36L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7140\"}'\'' -e'"" [2025-08-23 13:07:41][][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:07:41][][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN308P36L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7140\"}'\'' -e'"" [2025-08-23 13:07:45][][3746 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:07:45][][3903 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=107 [2025-08-23 13:07:45][][3903 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-08-23 13:07:45][][3903 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:07:47][354203113263166][0 ms][INFO] === Request start === [2025-08-23 13:07:47][354203113263166][1 ms][DEBUG] START check_scloud [2025-08-23 13:07:47][354203113263166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:07:48][354203113263166][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 23133 11396 23987592 159828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:07:48][354203113263166][261 ms][DEBUG] targetPkg: running [2025-08-23 13:07:48][354203113263166][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 13:07:48][354203113263166][261 ms][DEBUG] START check_boot_completed [2025-08-23 13:07:48][354203113263166][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:07:48][354203113263166][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:07:48][354203113263166][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:07:48][354203113263166][371 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:07:48][354203113263166][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:07:48][354203113263166][371 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:07:48][354203113263166][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-23 13:07:48][354203113263166][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:07:48][354203113263166][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-23 13:07:53][354203113263166][6057 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58363f98-a723-42dd-8add-619c59869ce8","id":"QR_58363f98-a723-42dd-8add-619c59869ce8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:07:54][354203113263166][6213 ms][DEBUG] proc_open done in 5841 ms; code=255; res.len=3343 [2025-08-23 13:07:54][354203113263166][6213 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 13:07:54][354203113263166][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:08:05][350262400356590][0 ms][INFO] === Request start === [2025-08-23 13:08:05][350262400356590][1 ms][DEBUG] START check_scloud [2025-08-23 13:08:05][350262400356590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:08:05][350262400356590][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 23133 11396 24089160 171904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:08:05][350262400356590][309 ms][DEBUG] targetPkg: running [2025-08-23 13:08:05][350262400356590][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 13:08:05][350262400356590][309 ms][DEBUG] START check_boot_completed [2025-08-23 13:08:05][350262400356590][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:08:05][350262400356590][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:08:05][350262400356590][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:08:05][350262400356590][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:08:05][350262400356590][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:08:05][350262400356590][418 ms][DEBUG] START check_internet [2025-08-23 13:08:05][350262400356590][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.433/203.433/203.433/0.000 ms\n [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] check_internet: online [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] END check_internet in 344 ms [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:08:06][350262400356590][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400356590\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:08:06][350262400356590][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400356590\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-08-23 13:08:12][350262400356590][6760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78844e7f-94d6-447c-a076-4346e504e1b9","id":"QR_78844e7f-94d6-447c-a076-4346e504e1b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:08:12][350262400356590][6916 ms][DEBUG] proc_open done in 6154 ms; code=255; res.len=3343 [2025-08-23 13:08:12][350262400356590][6916 ms][DEBUG] END runCmdUntilRes#1 in 6154 ms [2025-08-23 13:08:12][350262400356590][6916 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:08:18][353428899175729][0 ms][INFO] === Request start === [2025-08-23 13:08:18][353428899175729][1 ms][DEBUG] START check_scloud [2025-08-23 13:08:18][353428899175729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:08:19][353428899175729][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 23133 11396 24220424 183044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:08:19][353428899175729][302 ms][DEBUG] targetPkg: running [2025-08-23 13:08:19][353428899175729][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 13:08:19][353428899175729][302 ms][DEBUG] START check_boot_completed [2025-08-23 13:08:19][353428899175729][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:08:19][353428899175729][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:08:19][353428899175729][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:08:19][353428899175729][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:08:19][353428899175729][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:08:19][353428899175729][380 ms][DEBUG] START check_internet [2025-08-23 13:08:19][353428899175729][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.423/198.423/198.423/0.000 ms\n [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] check_internet: online [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] END check_internet in 312 ms [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:08:19][353428899175729][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899175729\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8086\"}'\'' -e'"" [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:08:19][353428899175729][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899175729\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8086\"}'\'' -e'"" [2025-08-23 13:08:24][353428899175729][6144 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7b03aba-5f68-4ae4-a1c3-ca1c45ddb676","id":"QR_b7b03aba-5f68-4ae4-a1c3-ca1c45ddb676","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:08:25][353428899175729][6301 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-23 13:08:25][353428899175729][6301 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-23 13:08:25][353428899175729][6301 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:08:31][356722917500919][0 ms][INFO] === Request start === [2025-08-23 13:08:31][356722917500919][1 ms][DEBUG] START check_scloud [2025-08-23 13:08:31][356722917500919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:08:32][356722917500919][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23133 11396 24361760 195020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:08:32][356722917500919][310 ms][DEBUG] targetPkg: running [2025-08-23 13:08:32][356722917500919][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 13:08:32][356722917500919][310 ms][DEBUG] START check_boot_completed [2025-08-23 13:08:32][356722917500919][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:08:32][356722917500919][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:08:32][356722917500919][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:08:32][356722917500919][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:08:32][356722917500919][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:08:32][356722917500919][403 ms][DEBUG] START check_internet [2025-08-23 13:08:32][356722917500919][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:08:32][356722917500919][731 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.291/225.291/225.291/0.000 ms\n [2025-08-23 13:08:32][356722917500919][732 ms][DEBUG] check_internet: online [2025-08-23 13:08:32][356722917500919][732 ms][DEBUG] END check_internet in 328 ms [2025-08-23 13:08:32][356722917500919][732 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:08:32][356722917500919][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917500919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6712\"}'\'' -e'"" [2025-08-23 13:08:32][356722917500919][732 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:08:32][356722917500919][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917500919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6712\"}'\'' -e'"" [2025-08-23 13:08:37][356722917500919][5683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e38070a-4f66-4d56-aabe-dcd6e547a6d1","id":"QR_5e38070a-4f66-4d56-aabe-dcd6e547a6d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:08:37][356722917500919][5839 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-08-23 13:08:37][356722917500919][5839 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-23 13:08:37][356722917500919][5839 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:09:03][352053264973887][0 ms][INFO] === Request start === [2025-08-23 13:09:03][352053264973887][1 ms][DEBUG] START check_scloud [2025-08-23 13:09:03][352053264973887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:09:03][352053264973887][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 23133 11396 24495904 206004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:09:03][352053264973887][295 ms][DEBUG] targetPkg: running [2025-08-23 13:09:03][352053264973887][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 13:09:03][352053264973887][295 ms][DEBUG] START check_boot_completed [2025-08-23 13:09:03][352053264973887][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:09:03][352053264973887][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:09:03][352053264973887][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:09:03][352053264973887][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:09:03][352053264973887][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:09:03][352053264973887][373 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:09:03][352053264973887][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264973887\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2424\"}'\'' -e'"" [2025-08-23 13:09:03][352053264973887][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:09:03][352053264973887][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264973887\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2424\"}'\'' -e'"" [2025-08-23 13:09:07][352053264973887][4372 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_771cf9f2-46fc-41fb-acb9-357b029c4f88","id":"QR_771cf9f2-46fc-41fb-acb9-357b029c4f88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:09:07][352053264973887][4529 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 13:09:07][352053264973887][4529 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 13:09:07][352053264973887][4529 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:09:10][350040127048868][1 ms][INFO] === Request start === [2025-08-23 13:09:10][350040127048868][1 ms][DEBUG] START check_scloud [2025-08-23 13:09:10][350040127048868][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:09:10][350040127048868][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 23133 11396 24675368 218088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:09:10][350040127048868][255 ms][DEBUG] targetPkg: running [2025-08-23 13:09:10][350040127048868][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-23 13:09:10][350040127048868][255 ms][DEBUG] START check_boot_completed [2025-08-23 13:09:10][350040127048868][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:09:10][350040127048868][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:09:10][350040127048868][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:09:11][350040127048868][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:09:11][350040127048868][349 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:09:11][350040127048868][349 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:09:11][350040127048868][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127048868\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5788\"}'\'' -e'"" [2025-08-23 13:09:11][350040127048868][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:09:11][350040127048868][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127048868\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5788\"}'\'' -e'"" [2025-08-23 13:09:14][350040127048868][4176 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb43a19d-1cdb-4199-92a4-36d209445289","id":"QR_bb43a19d-1cdb-4199-92a4-36d209445289","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:09:15][350040127048868][4332 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 13:09:15][350040127048868][4332 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 13:09:15][350040127048868][4332 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:09:17][354071311225646][0 ms][INFO] === Request start === [2025-08-23 13:09:17][354071311225646][1 ms][DEBUG] START check_scloud [2025-08-23 13:09:17][354071311225646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:09:18][354071311225646][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 23133 11396 24849588 228444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:09:18][354071311225646][297 ms][DEBUG] targetPkg: running [2025-08-23 13:09:18][354071311225646][297 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 13:09:18][354071311225646][297 ms][DEBUG] START check_boot_completed [2025-08-23 13:09:18][354071311225646][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:09:18][354071311225646][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:09:18][354071311225646][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:09:18][354071311225646][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:09:18][354071311225646][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:09:18][354071311225646][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:09:18][354071311225646][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071311225646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2488\"}'\'' -e'"" [2025-08-23 13:09:18][354071311225646][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:09:18][354071311225646][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071311225646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2488\"}'\'' -e'"" [2025-08-23 13:09:22][354071311225646][4280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfaa9602-b4b6-4a92-9e77-7d2f0067d3b2","id":"QR_bfaa9602-b4b6-4a92-9e77-7d2f0067d3b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:09:22][354071311225646][4437 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-23 13:09:22][354071311225646][4437 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 13:09:22][354071311225646][4437 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:09:24][357962501495477][0 ms][INFO] === Request start === [2025-08-23 13:09:24][357962501495477][1 ms][DEBUG] START check_scloud [2025-08-23 13:09:24][357962501495477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:09:25][357962501495477][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23133 11396 24975512 240388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:09:25][357962501495477][311 ms][DEBUG] targetPkg: running [2025-08-23 13:09:25][357962501495477][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 13:09:25][357962501495477][311 ms][DEBUG] START check_boot_completed [2025-08-23 13:09:25][357962501495477][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:09:25][357962501495477][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:09:25][357962501495477][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:09:25][357962501495477][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:09:25][357962501495477][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:09:25][357962501495477][405 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:09:25][357962501495477][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501495477\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8364\"}'\'' -e'"" [2025-08-23 13:09:25][357962501495477][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:09:25][357962501495477][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501495477\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8364\"}'\'' -e'"" [2025-08-23 13:09:29][357962501495477][4200 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:09:29][357962501495477][4200 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-23 13:09:29][357962501495477][4201 ms][WARN] Detected error: Process with pid 23133 either refused to load frida-agent, or terminated during injection [2025-08-23 13:09:29][357962501495477][4201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:09:29][357962501495477][4342 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 13:09:29][357962501495477][4342 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:09:29][357962501495477][4342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:09:29][357962501495477][4466 ms][DEBUG] SU: done in 124 ms; out [2025-08-23 13:09:29][357962501495477][4466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:09:29][357962501495477][4608 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:09:31][357962501495477][6622 ms][DEBUG] START check_boot_completed [2025-08-23 13:09:31][357962501495477][6622 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:09:31][357962501495477][6669 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:09:31][357962501495477][6669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:09:31][357962501495477][6715 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:09:31][357962501495477][6715 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:09:34][357962501495477][9730 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:09:34][357962501495477][9730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501495477\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8364\"}'\'' -e'"" [2025-08-23 13:09:38][357962501495477][13355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34cc5c80-c4b5-4df0-97e4-c37fb9659be2","id":"QR_34cc5c80-c4b5-4df0-97e4-c37fb9659be2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:09:38][357962501495477][13511 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-23 13:09:38][357962501495477][13511 ms][DEBUG] END runCmdUntilRes#2 in 3781 ms [2025-08-23 13:09:38][357962501495477][13511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:10:03][354505621773118][0 ms][INFO] === Request start === [2025-08-23 13:10:03][354505621773118][1 ms][DEBUG] START check_scloud [2025-08-23 13:10:03][354505621773118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:10:03][354505621773118][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 24284 11396 23596692 126684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:10:03][354505621773118][309 ms][DEBUG] targetPkg: running [2025-08-23 13:10:03][354505621773118][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 13:10:03][354505621773118][309 ms][DEBUG] START check_boot_completed [2025-08-23 13:10:03][354505621773118][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:10:03][354505621773118][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:10:03][354505621773118][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:10:03][354505621773118][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:10:03][354505621773118][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:10:03][354505621773118][403 ms][DEBUG] START check_internet [2025-08-23 13:10:03][354505621773118][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:10:04][354505621773118][918 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.499/202.499/202.499/0.000 ms\n [2025-08-23 13:10:04][354505621773118][918 ms][DEBUG] check_internet: online [2025-08-23 13:10:04][354505621773118][919 ms][DEBUG] END check_internet in 516 ms [2025-08-23 13:10:04][354505621773118][919 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:10:04][354505621773118][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621773118\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4351\"}'\'' -e'"" [2025-08-23 13:10:04][354505621773118][919 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:10:04][354505621773118][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621773118\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4351\"}'\'' -e'"" [2025-08-23 13:10:08][354505621773118][5136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68f10672-907a-4ddc-9e63-daa8bb1f8bfd","id":"QR_68f10672-907a-4ddc-9e63-daa8bb1f8bfd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:10:08][354505621773118][5292 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 13:10:08][354505621773118][5292 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 13:10:08][354505621773118][5292 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:10:11][350900921019466][0 ms][INFO] === Request start === [2025-08-23 13:10:11][350900921019466][1 ms][DEBUG] START check_scloud [2025-08-23 13:10:11][350900921019466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:10:11][350900921019466][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 24284 11396 23734044 137508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:10:11][350900921019466][315 ms][DEBUG] targetPkg: running [2025-08-23 13:10:11][350900921019466][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 13:10:11][350900921019466][315 ms][DEBUG] START check_boot_completed [2025-08-23 13:10:11][350900921019466][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:10:11][350900921019466][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:10:11][350900921019466][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:10:11][350900921019466][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:10:11][350900921019466][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:10:11][350900921019466][424 ms][DEBUG] START check_internet [2025-08-23 13:10:11][350900921019466][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:10:12][350900921019466][752 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.690/188.690/188.690/0.000 ms\n [2025-08-23 13:10:12][350900921019466][752 ms][DEBUG] check_internet: online [2025-08-23 13:10:12][350900921019466][752 ms][DEBUG] END check_internet in 328 ms [2025-08-23 13:10:12][350900921019466][752 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:10:12][350900921019466][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921019466\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9995\"}'\'' -e'"" [2025-08-23 13:10:12][350900921019466][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:10:12][350900921019466][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921019466\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9995\"}'\'' -e'"" [2025-08-23 13:10:16][350900921019466][5079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66829f1d-fa0a-42cc-a8b6-8131b3b49ed8","id":"QR_66829f1d-fa0a-42cc-a8b6-8131b3b49ed8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:10:16][350900921019466][5235 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 13:10:16][350900921019466][5235 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 13:10:16][350900921019466][5235 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:10:21][353428896983570][0 ms][INFO] === Request start === [2025-08-23 13:10:21][353428896983570][1 ms][DEBUG] START check_scloud [2025-08-23 13:10:21][353428896983570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:10:21][353428896983570][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 24284 11396 23918628 149248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:10:21][353428896983570][302 ms][DEBUG] targetPkg: running [2025-08-23 13:10:21][353428896983570][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 13:10:21][353428896983570][302 ms][DEBUG] START check_boot_completed [2025-08-23 13:10:21][353428896983570][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:10:21][353428896983570][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:10:21][353428896983570][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:10:21][353428896983570][411 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 13:10:21][353428896983570][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:10:21][353428896983570][411 ms][DEBUG] START check_internet [2025-08-23 13:10:21][353428896983570][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.103/222.103/222.103/0.000 ms\n [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] check_internet: online [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] END check_internet in 344 ms [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:10:22][353428896983570][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428896983570\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:10:22][353428896983570][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428896983570\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-08-23 13:10:27][353428896983570][6425 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04fd9cdd-3058-4339-9bc1-8dacca87f4e3","id":"QR_04fd9cdd-3058-4339-9bc1-8dacca87f4e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:10:27][353428896983570][6581 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-23 13:10:27][353428896983570][6581 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-23 13:10:27][353428896983570][6582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:10:32][351031121175848][0 ms][INFO] === Request start === [2025-08-23 13:10:32][351031121175848][1 ms][DEBUG] START check_scloud [2025-08-23 13:10:32][351031121175848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:10:32][351031121175848][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 24284 11396 24014052 159988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:10:32][351031121175848][255 ms][DEBUG] targetPkg: running [2025-08-23 13:10:32][351031121175848][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-23 13:10:32][351031121175848][255 ms][DEBUG] START check_boot_completed [2025-08-23 13:10:32][351031121175848][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:10:32][351031121175848][286 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:10:32][351031121175848][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:10:32][351031121175848][334 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 13:10:32][351031121175848][334 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 13:10:32][351031121175848][334 ms][DEBUG] START check_internet [2025-08-23 13:10:32][351031121175848][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:10:32][351031121175848][598 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.268/155.268/155.268/0.000 ms\n [2025-08-23 13:10:32][351031121175848][599 ms][DEBUG] check_internet: online [2025-08-23 13:10:32][351031121175848][599 ms][DEBUG] END check_internet in 265 ms [2025-08-23 13:10:32][351031121175848][599 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:10:32][351031121175848][599 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121175848\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-08-23 13:10:32][351031121175848][599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:10:32][351031121175848][599 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121175848\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-08-23 13:10:36][351031121175848][4488 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_158af0fd-685d-4227-be0e-d0194d3657be","id":"QR_158af0fd-685d-4227-be0e-d0194d3657be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:10:36][351031121175848][4644 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-23 13:10:36][351031121175848][4644 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-23 13:10:36][351031121175848][4644 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:11:03][350938284156392][1 ms][INFO] === Request start === [2025-08-23 13:11:03][350938284156392][1 ms][DEBUG] START check_scloud [2025-08-23 13:11:03][350938284156392][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:11:03][350938284156392][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24284 11396 24150436 172028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:11:03][350938284156392][303 ms][DEBUG] targetPkg: running [2025-08-23 13:11:03][350938284156392][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 13:11:03][350938284156392][303 ms][DEBUG] START check_boot_completed [2025-08-23 13:11:03][350938284156392][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:11:04][350938284156392][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:11:04][350938284156392][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:11:04][350938284156392][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:11:04][350938284156392][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:11:04][350938284156392][397 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:11:04][350938284156392][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284156392\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-23 13:11:04][350938284156392][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:11:04][350938284156392][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284156392\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-23 13:11:07][350938284156392][4318 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dce11f5-695d-4b5e-8c78-f19e9057a57c","id":"QR_7dce11f5-695d-4b5e-8c78-f19e9057a57c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:11:08][350938284156392][4474 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-23 13:11:08][350938284156392][4474 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 13:11:08][350938284156392][4474 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:11:09][354747952789939][0 ms][INFO] === Request start === [2025-08-23 13:11:09][354747952789939][1 ms][DEBUG] START check_scloud [2025-08-23 13:11:09][354747952789939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:11:10][354747952789939][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 24284 11396 24318664 182988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:11:10][354747952789939][252 ms][DEBUG] targetPkg: running [2025-08-23 13:11:10][354747952789939][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-23 13:11:10][354747952789939][252 ms][DEBUG] START check_boot_completed [2025-08-23 13:11:10][354747952789939][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:11:10][354747952789939][297 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 13:11:10][354747952789939][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:11:10][354747952789939][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:11:10][354747952789939][344 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 13:11:10][354747952789939][344 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:11:10][354747952789939][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952789939\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3842\"}'\'' -e'"" [2025-08-23 13:11:10][354747952789939][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:11:10][354747952789939][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952789939\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3842\"}'\'' -e'"" [2025-08-23 13:11:14][354747952789939][4187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bf40f92-1f57-459f-8eea-75be7fcd95c2","id":"QR_4bf40f92-1f57-459f-8eea-75be7fcd95c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:11:14][354747952789939][4343 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-23 13:11:14][354747952789939][4343 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-23 13:11:14][354747952789939][4343 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:11:15][350493707487420][0 ms][INFO] === Request start === [2025-08-23 13:11:15][350493707487420][1 ms][DEBUG] START check_scloud [2025-08-23 13:11:15][350493707487420][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:11:16][350493707487420][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 24284 11396 24463056 194552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:11:16][350493707487420][315 ms][DEBUG] targetPkg: running [2025-08-23 13:11:16][350493707487420][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 13:11:16][350493707487420][315 ms][DEBUG] START check_boot_completed [2025-08-23 13:11:16][350493707487420][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:11:16][350493707487420][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:11:16][350493707487420][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:11:16][350493707487420][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:11:16][350493707487420][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:11:16][350493707487420][424 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:11:16][350493707487420][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350493707487420\",\"model\":\"SM-S921N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-23 13:11:16][350493707487420][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:11:16][350493707487420][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350493707487420\",\"model\":\"SM-S921N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-23 13:11:20][350493707487420][4501 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4048107-fa25-4b62-93c1-48cc1d60b0f7","id":"QR_e4048107-fa25-4b62-93c1-48cc1d60b0f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:11:20][350493707487420][4657 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-23 13:11:20][350493707487420][4657 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 13:11:20][350493707487420][4657 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:11:24][356130860452072][0 ms][INFO] === Request start === [2025-08-23 13:11:24][356130860452072][1 ms][DEBUG] START check_scloud [2025-08-23 13:11:24][356130860452072][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:11:24][356130860452072][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 24284 11396 24603444 205444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:11:24][356130860452072][301 ms][DEBUG] targetPkg: running [2025-08-23 13:11:24][356130860452072][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 13:11:24][356130860452072][301 ms][DEBUG] START check_boot_completed [2025-08-23 13:11:24][356130860452072][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:11:24][356130860452072][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:11:24][356130860452072][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:11:24][356130860452072][440 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 13:11:24][356130860452072][440 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-23 13:11:24][356130860452072][440 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:11:24][356130860452072][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860452072\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-08-23 13:11:24][356130860452072][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:11:24][356130860452072][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860452072\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-08-23 13:11:30][356130860452072][6298 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b38faf8-bf1e-405c-8e0c-352fa7023161","id":"QR_2b38faf8-bf1e-405c-8e0c-352fa7023161","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:11:30][356130860452072][6454 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-08-23 13:11:30][356130860452072][6454 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-23 13:11:30][356130860452072][6455 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:12:02][352053266520082][1 ms][INFO] === Request start === [2025-08-23 13:12:02][352053266520082][1 ms][DEBUG] START check_scloud [2025-08-23 13:12:02][352053266520082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:12:02][352053266520082][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24284 11396 24710020 216732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:12:02][352053266520082][303 ms][DEBUG] targetPkg: running [2025-08-23 13:12:02][352053266520082][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 13:12:02][352053266520082][303 ms][DEBUG] START check_boot_completed [2025-08-23 13:12:02][352053266520082][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:12:02][352053266520082][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:12:02][352053266520082][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:12:02][352053266520082][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:12:02][352053266520082][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:12:02][352053266520082][397 ms][DEBUG] START check_internet [2025-08-23 13:12:02][352053266520082][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:12:03][352053266520082][724 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.523/216.523/216.523/0.000 ms\n [2025-08-23 13:12:03][352053266520082][725 ms][DEBUG] check_internet: online [2025-08-23 13:12:03][352053266520082][725 ms][DEBUG] END check_internet in 328 ms [2025-08-23 13:12:03][352053266520082][725 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:12:03][352053266520082][725 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266520082\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-23 13:12:03][352053266520082][725 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:12:03][352053266520082][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266520082\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-23 13:12:07][352053266520082][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9531fe9-0d95-4b5a-9eaa-45d1034b3979","id":"QR_b9531fe9-0d95-4b5a-9eaa-45d1034b3979","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:12:07][352053266520082][4864 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 13:12:07][352053266520082][4864 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 13:12:07][352053266520082][4864 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:12:09][357211249589062][1 ms][INFO] === Request start === [2025-08-23 13:12:09][357211249589062][1 ms][DEBUG] START check_scloud [2025-08-23 13:12:09][357211249589062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:12:09][357211249589062][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24284 11396 24862732 228796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:12:09][357211249589062][307 ms][DEBUG] targetPkg: running [2025-08-23 13:12:09][357211249589062][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 13:12:09][357211249589062][307 ms][DEBUG] START check_boot_completed [2025-08-23 13:12:09][357211249589062][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:12:09][357211249589062][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:12:09][357211249589062][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:12:09][357211249589062][448 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 13:12:09][357211249589062][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 13:12:09][357211249589062][448 ms][DEBUG] START check_internet [2025-08-23 13:12:09][357211249589062][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.568/150.568/150.568/0.000 ms\n [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] check_internet: online [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] END check_internet in 281 ms [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:12:10][357211249589062][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249589062\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2137\"}'\'' -e'"" [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:12:10][357211249589062][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249589062\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2137\"}'\'' -e'"" [2025-08-23 13:12:14][357211249589062][4509 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a9bdbc8-5c08-4354-8c97-c586c9a1a660","id":"QR_1a9bdbc8-5c08-4354-8c97-c586c9a1a660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:12:14][357211249589062][4665 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 13:12:14][357211249589062][4665 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-23 13:12:14][357211249589062][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:12:16][350013881658479][0 ms][INFO] === Request start === [2025-08-23 13:12:16][350013881658479][1 ms][DEBUG] START check_scloud [2025-08-23 13:12:16][350013881658479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:12:17][350013881658479][260 ms][DEBUG] SU: done in 260 ms; outu0_a118 24284 11396 25027348 240060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:12:17][350013881658479][261 ms][DEBUG] targetPkg: running [2025-08-23 13:12:17][350013881658479][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 13:12:17][350013881658479][261 ms][DEBUG] START check_boot_completed [2025-08-23 13:12:17][350013881658479][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:12:17][350013881658479][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:12:17][350013881658479][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:12:17][350013881658479][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:12:17][350013881658479][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:12:17][350013881658479][354 ms][DEBUG] START check_internet [2025-08-23 13:12:17][350013881658479][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:12:17][350013881658479][682 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.085/219.085/219.085/0.000 ms\n [2025-08-23 13:12:17][350013881658479][682 ms][DEBUG] check_internet: online [2025-08-23 13:12:17][350013881658479][682 ms][DEBUG] END check_internet in 328 ms [2025-08-23 13:12:17][350013881658479][682 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:12:17][350013881658479][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658479\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-23 13:12:17][350013881658479][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:12:17][350013881658479][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658479\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-23 13:12:21][350013881658479][4509 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:12:21][350013881658479][4510 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-23 13:12:21][350013881658479][4510 ms][WARN] Detected error: Process with pid 24284 either refused to load frida-agent, or terminated during injection [2025-08-23 13:12:21][350013881658479][4510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:12:21][350013881658479][4650 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:12:21][350013881658479][4650 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:12:21][350013881658479][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:12:21][350013881658479][4775 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:12:21][350013881658479][4775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:12:21][350013881658479][4947 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:12:23][350013881658479][6962 ms][DEBUG] START check_boot_completed [2025-08-23 13:12:23][350013881658479][6962 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:12:23][350013881658479][7009 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:12:23][350013881658479][7009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:12:23][350013881658479][7056 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:12:23][350013881658479][7056 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:12:26][350013881658479][10070 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:12:26][350013881658479][10070 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658479\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-23 13:12:27][350013881658479][10634 ms][DEBUG] proc_open done in 564 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-23 13:12:27][350013881658479][10634 ms][DEBUG] END runCmdUntilRes#2 in 564 ms [2025-08-23 13:12:27][350013881658479][10634 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-23 13:12:30][352549939481180][0 ms][INFO] === Request start === [2025-08-23 13:12:30][352549939481180][1 ms][DEBUG] START check_scloud [2025-08-23 13:12:30][352549939481180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:12:30][352549939481180][276 ms][DEBUG] SU: done in 275 ms; out [2025-08-23 13:12:30][352549939481180][276 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:12:30][352549939481180][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:12:30][352549939481180][401 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:12:30][352549939481180][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:12:31][352549939481180][542 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 13:12:33][352549939481180][2556 ms][DEBUG] END check_scloud in 2556 ms [2025-08-23 13:12:33][352549939481180][2557 ms][DEBUG] START check_boot_completed [2025-08-23 13:12:33][352549939481180][2557 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:12:33][352549939481180][2603 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:12:33][352549939481180][2603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:12:33][352549939481180][2666 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 13:12:33][352549939481180][2666 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:12:33][352549939481180][2666 ms][DEBUG] START check_internet [2025-08-23 13:12:33][352549939481180][2666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:12:33][352549939481180][2775 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 13:12:33][352549939481180][2775 ms][WARN] check_internet: offline [2025-08-23 13:12:33][352549939481180][2775 ms][DEBUG] END check_internet in 109 ms [2025-08-23 13:13:03][350013881658479][0 ms][INFO] === Request start === [2025-08-23 13:13:03][350013881658479][1 ms][DEBUG] START check_scloud [2025-08-23 13:13:03][350013881658479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:13:04][350013881658479][523 ms][DEBUG] SU: done in 522 ms; out [2025-08-23 13:13:04][350013881658479][523 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:13:04][350013881658479][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:13:04][350013881658479][695 ms][DEBUG] SU: done in 172 ms; out [2025-08-23 13:13:04][350013881658479][695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:13:04][350013881658479][1195 ms][DEBUG] SU: done in 500 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:13:06][350013881658479][3210 ms][DEBUG] END check_scloud in 3209 ms [2025-08-23 13:13:06][350013881658479][3210 ms][DEBUG] START check_boot_completed [2025-08-23 13:13:06][350013881658479][3210 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:13:06][350013881658479][3257 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:13:06][350013881658479][3257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:13:06][350013881658479][3319 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:13:06][350013881658479][3319 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:13:06][350013881658479][3319 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:13:06][350013881658479][3319 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658479\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3038\"}'\'' -e'"" [2025-08-23 13:13:06][350013881658479][3319 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:13:06][350013881658479][3319 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658479\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3038\"}'\'' -e'"" [2025-08-23 13:13:13][350013881658479][9942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d06629a-a11f-4f33-adb0-a604fcc0238a","id":"QR_7d06629a-a11f-4f33-adb0-a604fcc0238a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:13:13][350013881658479][10099 ms][DEBUG] proc_open done in 6779 ms; code=255; res.len=3343 [2025-08-23 13:13:13][350013881658479][10099 ms][DEBUG] END runCmdUntilRes#1 in 6780 ms [2025-08-23 13:13:13][350013881658479][10099 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:13:16][352549939481180][0 ms][INFO] === Request start === [2025-08-23 13:13:16][352549939481180][1 ms][DEBUG] START check_scloud [2025-08-23 13:13:16][352549939481180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:13:16][352549939481180][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 28886 25641 23711420 114472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:13:16][352549939481180][316 ms][DEBUG] targetPkg: running [2025-08-23 13:13:16][352549939481180][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 13:13:16][352549939481180][316 ms][DEBUG] START check_boot_completed [2025-08-23 13:13:16][352549939481180][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:13:16][352549939481180][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:13:16][352549939481180][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:13:16][352549939481180][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:13:16][352549939481180][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:13:16][352549939481180][395 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:13:16][352549939481180][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939481180\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1527\"}'\'' -e'"" [2025-08-23 13:13:16][352549939481180][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:13:16][352549939481180][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939481180\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1527\"}'\'' -e'"" [2025-08-23 13:13:21][352549939481180][5721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8275b3d6-ba00-4c6c-b56c-e99c24794597","id":"QR_8275b3d6-ba00-4c6c-b56c-e99c24794597","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:13:22][352549939481180][5878 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-08-23 13:13:22][352549939481180][5878 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-08-23 13:13:22][352549939481180][5878 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:13:24][352923545733500][0 ms][INFO] === Request start === [2025-08-23 13:13:24][352923545733500][1 ms][DEBUG] START check_scloud [2025-08-23 13:13:24][352923545733500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:13:25][352923545733500][364 ms][DEBUG] SU: done in 363 ms; outu0_a118 28886 25641 23860100 93976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:13:25][352923545733500][364 ms][DEBUG] targetPkg: running [2025-08-23 13:13:25][352923545733500][364 ms][DEBUG] END check_scloud in 363 ms [2025-08-23 13:13:25][352923545733500][364 ms][DEBUG] START check_boot_completed [2025-08-23 13:13:25][352923545733500][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:13:25][352923545733500][411 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:13:25][352923545733500][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:13:25][352923545733500][457 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:13:25][352923545733500][457 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:13:25][352923545733500][457 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:13:25][352923545733500][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545733500\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7681\"}'\'' -e'"" [2025-08-23 13:13:25][352923545733500][457 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:13:25][352923545733500][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545733500\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7681\"}'\'' -e'"" [2025-08-23 13:13:29][352923545733500][5019 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10105a72-dcd5-4db5-9616-4f9f7ebc3a64","id":"QR_10105a72-dcd5-4db5-9616-4f9f7ebc3a64","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:13:29][352923545733500][5175 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-23 13:13:29][352923545733500][5175 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-23 13:13:29][352923545733500][5175 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:14:03][351626711672102][0 ms][INFO] === Request start === [2025-08-23 13:14:03][351626711672102][1 ms][DEBUG] START check_scloud [2025-08-23 13:14:03][351626711672102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:14:04][351626711672102][356 ms][DEBUG] SU: done in 355 ms; outu0_a118 28886 25641 23884732 60972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:14:04][351626711672102][356 ms][DEBUG] targetPkg: running [2025-08-23 13:14:04][351626711672102][356 ms][DEBUG] END check_scloud in 355 ms [2025-08-23 13:14:04][351626711672102][356 ms][DEBUG] START check_boot_completed [2025-08-23 13:14:04][351626711672102][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:14:04][351626711672102][403 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:14:04][351626711672102][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:14:04][351626711672102][465 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:14:04][351626711672102][465 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:14:04][351626711672102][465 ms][DEBUG] START check_internet [2025-08-23 13:14:04][351626711672102][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.145/178.145/178.145/0.000 ms\n [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] check_internet: online [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] END check_internet in 390 ms [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:14:04][351626711672102][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711672102\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5744\"}'\'' -e'"" [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:14:04][351626711672102][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711672102\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5744\"}'\'' -e'"" [2025-08-23 13:14:09][351626711672102][5917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0454a7b4-8ea7-40bc-b14a-ded7a620081c","id":"QR_0454a7b4-8ea7-40bc-b14a-ded7a620081c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:14:10][351626711672102][6073 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-23 13:14:10][351626711672102][6073 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-23 13:14:10][351626711672102][6073 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:17:05][356414815901346][1 ms][INFO] === Request start === [2025-08-23 13:17:05][356414815901346][1 ms][DEBUG] START check_scloud [2025-08-23 13:17:05][356414815901346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:17:05][356414815901346][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 28886 25641 24015956 89596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:17:05][356414815901346][276 ms][DEBUG] targetPkg: running [2025-08-23 13:17:05][356414815901346][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 13:17:05][356414815901346][276 ms][DEBUG] START check_boot_completed [2025-08-23 13:17:05][356414815901346][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:17:05][356414815901346][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:17:05][356414815901346][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:17:05][356414815901346][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:17:05][356414815901346][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:17:05][356414815901346][354 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:17:05][356414815901346][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815901346\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6497\"}'\'' -e'"" [2025-08-23 13:17:05][356414815901346][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:17:05][356414815901346][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815901346\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6497\"}'\'' -e'"" [2025-08-23 13:17:09][356414815901346][4415 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 13:17:10][356414815901346][4572 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=101 [2025-08-23 13:17:10][356414815901346][4572 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 13:17:10][356414815901346][4572 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 13:17:10][][0 ms][INFO] === Request start === [2025-08-23 13:17:10][][1 ms][DEBUG] START check_scloud [2025-08-23 13:17:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:17:10][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 28886 25641 24193372 99080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:17:10][][309 ms][DEBUG] targetPkg: running [2025-08-23 13:17:10][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 13:17:10][][309 ms][DEBUG] START check_boot_completed [2025-08-23 13:17:10][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:17:10][][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:17:10][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:17:10][][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:17:10][][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:17:10][][418 ms][DEBUG] rawBody.length=1129 [2025-08-23 13:17:10][][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W102J38L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6812\"}'\'' -e'"" [2025-08-23 13:17:10][][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:17:10][][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W102J38L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6812\"}'\'' -e'"" [2025-08-23 13:17:14][][3995 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 13:17:14][][4151 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=101 [2025-08-23 13:17:14][][4151 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-23 13:17:14][][4151 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 13:17:17][356414815901346][0 ms][INFO] === Request start === [2025-08-23 13:17:17][356414815901346][1 ms][DEBUG] START check_scloud [2025-08-23 13:17:17][356414815901346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:17:17][356414815901346][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 28886 25641 24349284 112920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:17:17][356414815901346][268 ms][DEBUG] targetPkg: running [2025-08-23 13:17:17][356414815901346][268 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 13:17:17][356414815901346][269 ms][DEBUG] START check_boot_completed [2025-08-23 13:17:17][356414815901346][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:17:17][356414815901346][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:17:17][356414815901346][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:17:17][356414815901346][363 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 13:17:17][356414815901346][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:17:17][356414815901346][363 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:17:17][356414815901346][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815901346\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4771\"}'\'' -e'"" [2025-08-23 13:17:17][356414815901346][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:17:17][356414815901346][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815901346\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4771\"}'\'' -e'"" [2025-08-23 13:17:21][356414815901346][4470 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:17:21][356414815901346][4627 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=107 [2025-08-23 13:17:21][356414815901346][4627 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 13:17:21][356414815901346][4627 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:17:22][][0 ms][INFO] === Request start === [2025-08-23 13:17:22][][1 ms][DEBUG] START check_scloud [2025-08-23 13:17:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:17:22][][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 28886 25641 24519980 114508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:17:22][][277 ms][DEBUG] targetPkg: running [2025-08-23 13:17:22][][277 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 13:17:22][][277 ms][DEBUG] START check_boot_completed [2025-08-23 13:17:22][][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:17:22][][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:17:22][][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:17:22][][418 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 13:17:22][][418 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 13:17:22][][418 ms][DEBUG] rawBody.length=1130 [2025-08-23 13:17:22][][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZ8W102J38L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1313\"}'\'' -e'"" [2025-08-23 13:17:22][][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:17:22][][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZ8W102J38L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1313\"}'\'' -e'"" [2025-08-23 13:17:26][][4464 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:17:26][][4620 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=107 [2025-08-23 13:17:26][][4620 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 13:17:26][][4620 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:19:03][352432794764216][0 ms][INFO] === Request start === [2025-08-23 13:19:03][352432794764216][1 ms][DEBUG] START check_scloud [2025-08-23 13:19:03][352432794764216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:19:03][352432794764216][333 ms][DEBUG] SU: done in 333 ms; outu0_a118 28886 25641 24588708 125664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:19:03][352432794764216][334 ms][DEBUG] targetPkg: running [2025-08-23 13:19:03][352432794764216][334 ms][DEBUG] END check_scloud in 333 ms [2025-08-23 13:19:03][352432794764216][334 ms][DEBUG] START check_boot_completed [2025-08-23 13:19:03][352432794764216][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:19:03][352432794764216][380 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:19:03][352432794764216][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:19:03][352432794764216][427 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:19:03][352432794764216][427 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:19:03][352432794764216][427 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:19:03][352432794764216][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432794764216\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6275\"}'\'' -e'"" [2025-08-23 13:19:03][352432794764216][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:19:03][352432794764216][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432794764216\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6275\"}'\'' -e'"" [2025-08-23 13:19:07][352432794764216][4692 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc49a657-0f98-491a-af12-c217943c3131","id":"QR_dc49a657-0f98-491a-af12-c217943c3131","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:19:08][352432794764216][4848 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 13:19:08][352432794764216][4848 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 13:19:08][352432794764216][4848 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:23:03][357316940043689][1 ms][INFO] === Request start === [2025-08-23 13:23:03][357316940043689][1 ms][DEBUG] START check_scloud [2025-08-23 13:23:03][357316940043689][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:23:03][357316940043689][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 28886 25641 24696456 136696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:23:03][357316940043689][289 ms][DEBUG] targetPkg: running [2025-08-23 13:23:03][357316940043689][289 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 13:23:03][357316940043689][289 ms][DEBUG] START check_boot_completed [2025-08-23 13:23:03][357316940043689][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:23:03][357316940043689][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:23:03][357316940043689][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:23:03][357316940043689][382 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 13:23:03][357316940043689][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:23:03][357316940043689][383 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:23:03][357316940043689][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357316940043689\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9532\"}'\'' -e'"" [2025-08-23 13:23:03][357316940043689][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:23:03][357316940043689][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357316940043689\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9532\"}'\'' -e'"" [2025-08-23 13:23:07][357316940043689][4600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2af0ef44-3541-4d47-bcaa-2ab715320e27","id":"QR_2af0ef44-3541-4d47-bcaa-2ab715320e27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:23:07][357316940043689][4756 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 13:23:07][357316940043689][4756 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 13:23:07][357316940043689][4756 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:25:03][352248234646478][0 ms][INFO] === Request start === [2025-08-23 13:25:03][352248234646478][1 ms][DEBUG] START check_scloud [2025-08-23 13:25:03][352248234646478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:25:04][352248234646478][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 28886 25641 24818412 148076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:25:04][352248234646478][276 ms][DEBUG] targetPkg: running [2025-08-23 13:25:04][352248234646478][276 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 13:25:04][352248234646478][276 ms][DEBUG] START check_boot_completed [2025-08-23 13:25:04][352248234646478][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:25:04][352248234646478][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:25:04][352248234646478][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:25:04][352248234646478][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:25:04][352248234646478][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:25:04][352248234646478][370 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:25:04][352248234646478][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248234646478\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4174\"}'\'' -e'"" [2025-08-23 13:25:04][352248234646478][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:25:04][352248234646478][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248234646478\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4174\"}'\'' -e'"" [2025-08-23 13:25:08][352248234646478][4415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba42a080-c46f-407c-8cfe-673a8b108b87","id":"QR_ba42a080-c46f-407c-8cfe-673a8b108b87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:25:08][352248234646478][4571 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 13:25:08][352248234646478][4571 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 13:25:08][352248234646478][4572 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:27:03][359117200959525][0 ms][INFO] === Request start === [2025-08-23 13:27:03][359117200959525][0 ms][DEBUG] START check_scloud [2025-08-23 13:27:03][359117200959525][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:27:03][359117200959525][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 28886 25641 24944468 159264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:27:03][359117200959525][311 ms][DEBUG] targetPkg: running [2025-08-23 13:27:03][359117200959525][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 13:27:03][359117200959525][311 ms][DEBUG] START check_boot_completed [2025-08-23 13:27:03][359117200959525][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:27:03][359117200959525][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:27:03][359117200959525][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:27:03][359117200959525][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:27:03][359117200959525][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:27:03][359117200959525][389 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:27:03][359117200959525][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359117200959525\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7152\"}'\'' -e'"" [2025-08-23 13:27:03][359117200959525][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:27:03][359117200959525][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359117200959525\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7152\"}'\'' -e'"" [2025-08-23 13:27:08][359117200959525][4732 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:27:08][359117200959525][4732 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-23 13:27:08][359117200959525][4732 ms][WARN] Detected error: Process with pid 28886 either refused to load frida-agent, or terminated during injection [2025-08-23 13:27:08][359117200959525][4732 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:27:08][359117200959525][4873 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 13:27:08][359117200959525][4873 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:27:08][359117200959525][4873 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:27:08][359117200959525][4998 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:27:08][359117200959525][4998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:27:08][359117200959525][5186 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:27:10][359117200959525][7200 ms][DEBUG] START check_boot_completed [2025-08-23 13:27:10][359117200959525][7200 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:27:10][359117200959525][7247 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:27:10][359117200959525][7247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:27:10][359117200959525][7310 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:27:10][359117200959525][7310 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:27:13][359117200959525][10324 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:27:13][359117200959525][10324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359117200959525\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7152\"}'\'' -e'"" [2025-08-23 13:27:17][359117200959525][14370 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d884081-ee54-4882-ad47-4975c1d36841","id":"QR_3d884081-ee54-4882-ad47-4975c1d36841","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:27:17][359117200959525][14526 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 13:27:17][359117200959525][14527 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-23 13:27:17][359117200959525][14527 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:27:20][357967977957413][0 ms][INFO] === Request start === [2025-08-23 13:27:20][357967977957413][1 ms][DEBUG] START check_scloud [2025-08-23 13:27:20][357967977957413][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:27:20][357967977957413][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 6997 25641 23644444 124312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:27:20][357967977957413][271 ms][DEBUG] targetPkg: running [2025-08-23 13:27:20][357967977957413][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-23 13:27:20][357967977957413][271 ms][DEBUG] START check_boot_completed [2025-08-23 13:27:20][357967977957413][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:27:20][357967977957413][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:27:20][357967977957413][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:27:20][357967977957413][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:27:20][357967977957413][365 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:27:20][357967977957413][365 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:27:20][357967977957413][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977957413\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9522\"}'\'' -e'"" [2025-08-23 13:27:20][357967977957413][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:27:20][357967977957413][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977957413\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9522\"}'\'' -e'"" [2025-08-23 13:27:24][357967977957413][4316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81b85a53-ac96-4370-b243-2f0a1c470482","id":"QR_81b85a53-ac96-4370-b243-2f0a1c470482","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:27:24][357967977957413][4472 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-23 13:27:24][357967977957413][4472 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-23 13:27:24][357967977957413][4472 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:28:03][357950540876252][1 ms][INFO] === Request start === [2025-08-23 13:28:03][357950540876252][1 ms][DEBUG] START check_scloud [2025-08-23 13:28:03][357950540876252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:28:04][357950540876252][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 6997 25641 23696888 137864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:28:04][357950540876252][307 ms][DEBUG] targetPkg: running [2025-08-23 13:28:04][357950540876252][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 13:28:04][357950540876252][307 ms][DEBUG] START check_boot_completed [2025-08-23 13:28:04][357950540876252][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:28:04][357950540876252][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:28:04][357950540876252][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:28:04][357950540876252][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:28:04][357950540876252][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:28:04][357950540876252][400 ms][DEBUG] START check_internet [2025-08-23 13:28:04][357950540876252][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.302/201.302/201.302/0.000 ms\n [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] check_internet: online [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] END check_internet in 422 ms [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:28:04][357950540876252][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950540876252\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2457\"}'\'' -e'"" [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:28:04][357950540876252][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950540876252\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2457\"}'\'' -e'"" [2025-08-23 13:28:08][357950540876252][4774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9042688f-633e-4bf2-b009-8f639849ebfc","id":"QR_9042688f-633e-4bf2-b009-8f639849ebfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:28:08][357950540876252][4930 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-23 13:28:08][357950540876252][4930 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 13:28:08][357950540876252][4930 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:29:04][355707113004221][0 ms][INFO] === Request start === [2025-08-23 13:29:04][355707113004221][1 ms][DEBUG] START check_scloud [2025-08-23 13:29:04][355707113004221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:29:04][355707113004221][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 6997 25641 23808732 149792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:29:04][355707113004221][257 ms][DEBUG] targetPkg: running [2025-08-23 13:29:04][355707113004221][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 13:29:04][355707113004221][257 ms][DEBUG] START check_boot_completed [2025-08-23 13:29:04][355707113004221][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:29:04][355707113004221][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:29:04][355707113004221][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:29:05][355707113004221][366 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:29:05][355707113004221][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:29:05][355707113004221][366 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:29:05][355707113004221][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113004221\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2370\"}'\'' -e'"" [2025-08-23 13:29:05][355707113004221][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:29:05][355707113004221][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113004221\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2370\"}'\'' -e'"" [2025-08-23 13:29:10][355707113004221][6068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d047b7c6-ca7e-4320-ab01-7950eea70648","id":"QR_d047b7c6-ca7e-4320-ab01-7950eea70648","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:29:10][355707113004221][6224 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=3343 [2025-08-23 13:29:10][355707113004221][6224 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-23 13:29:10][355707113004221][6224 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:29:18][352749382422091][0 ms][INFO] === Request start === [2025-08-23 13:29:18][352749382422091][1 ms][DEBUG] START check_scloud [2025-08-23 13:29:18][352749382422091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:29:18][352749382422091][265 ms][DEBUG] SU: done in 264 ms; out [2025-08-23 13:29:18][352749382422091][265 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:29:18][352749382422091][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:29:19][352749382422091][421 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 13:29:19][352749382422091][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:29:19][352749382422091][546 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 13:29:21][352749382422091][2561 ms][DEBUG] END check_scloud in 2561 ms [2025-08-23 13:29:21][352749382422091][2561 ms][DEBUG] START check_boot_completed [2025-08-23 13:29:21][352749382422091][2561 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:29:21][352749382422091][2608 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:29:21][352749382422091][2608 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:29:21][352749382422091][2671 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:29:21][352749382422091][2671 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:29:21][352749382422091][2671 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:29:21][352749382422091][2671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-08-23 13:29:21][352749382422091][2671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:29:21][352749382422091][2671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-08-23 13:29:22][352749382422091][4046 ms][DEBUG] proc_open done in 1374 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 13:29:22][352749382422091][4046 ms][DEBUG] END runCmdUntilRes#1 in 1374 ms [2025-08-23 13:29:22][352749382422091][4046 ms][WARN] Detected error: {"type":"error","description":"TypeError: Cannot read properties of null (reading 'queryIntentActivities')","stack":"TypeError: Cannot read properties of null (reading 'queryIntentActivities')\n at detectLauncherPackageName (/internal-agent.js:403:36)\n at init (/internal-agent.js:49:21)\n at c.perform (frida/node_modules/frida-java-bridge/lib/vm.js:12:1)\n at _performPendingVmOps (frida/node_modules/frida-java-bridge/index.js:250:1)\n at frida/node_modules/frida-java-bridge/index.js:225:1\n at c.perform (frida/node_modules/frida-java-bridge/lib/vm.js:12:1)\n at _performPendingVmOpsWhenReady (frida/node_modules/frida-java-bridge/index.js:223:1)\n at _.perform (frida/node_modules/frida-java-bridge/index.js:204:1)\n at /internal-agent.js:490:6","fileName":"/internal-agent.js","lineNumber":403,"columnNumber":36}java.lang.NullPointerException: Attempt to invoke interface method 'java.util.List android.app.IActivityManager.getRunningAppProcesses()' on a null object reference [2025-08-23 13:29:22][352749382422091][4046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:29:22][352749382422091][4186 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:29:22][352749382422091][4186 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:29:22][352749382422091][4186 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:29:23][352749382422091][4327 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:29:23][352749382422091][4327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:29:23][352749382422091][4483 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 13:29:25][352749382422091][6498 ms][DEBUG] START check_boot_completed [2025-08-23 13:29:25][352749382422091][6498 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:29:25][352749382422091][6545 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:29:25][352749382422091][6545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:29:25][352749382422091][6607 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 13:29:25][352749382422091][6608 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:29:28][352749382422091][9622 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:29:28][352749382422091][9622 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-08-23 13:29:54][352749382422091][35882 ms][DEBUG] proc_open done in 26260 ms (timeout); code=4; out.len=0 err.len=870 [2025-08-23 13:29:54][352749382422091][35882 ms][DEBUG] END runCmdUntilRes#2 in 26260 ms [2025-08-23 13:29:54][352749382422091][35882 ms][WARN] Detected error 2; Reboot the device [2025-08-23 13:29:54][352749382422091][35882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 13:29:55][352749382422091][36460 ms][DEBUG] SU: done in 578 ms; out [2025-08-23 13:30:04][352749382422091][1 ms][INFO] === Request start === [2025-08-23 13:30:04][352749382422091][1 ms][DEBUG] START check_scloud [2025-08-23 13:30:04][352749382422091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:30:04][352749382422091][30 ms][DEBUG] SU: done in 29 ms; out [2025-08-23 13:30:04][352749382422091][30 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:30:04][352749382422091][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:30:04][352749382422091][61 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 13:30:04][352749382422091][61 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:30:04][352749382422091][92 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 13:30:06][352749382422091][2107 ms][DEBUG] END check_scloud in 2106 ms [2025-08-23 13:30:06][352749382422091][2108 ms][DEBUG] START check_boot_completed [2025-08-23 13:30:06][352749382422091][2108 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:31:05][352749382422091][0 ms][INFO] === Request start === [2025-08-23 13:31:05][352749382422091][1 ms][DEBUG] START check_scloud [2025-08-23 13:31:05][352749382422091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:31:05][352749382422091][400 ms][DEBUG] SU: done in 399 ms; out [2025-08-23 13:31:05][352749382422091][400 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:31:05][352749382422091][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:31:06][352749382422091][587 ms][DEBUG] SU: done in 188 ms; out [2025-08-23 13:31:06][352749382422091][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:31:06][352749382422091][963 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:31:08][352749382422091][2978 ms][DEBUG] END check_scloud in 2977 ms [2025-08-23 13:31:08][352749382422091][2978 ms][DEBUG] START check_boot_completed [2025-08-23 13:31:08][352749382422091][2978 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:31:08][352749382422091][3025 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:31:08][352749382422091][3025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:31:08][352749382422091][3196 ms][DEBUG] SU: done in 172 ms; out [2025-08-23 13:31:08][352749382422091][3196 ms][DEBUG] END check_boot_completed in 219 ms [2025-08-23 13:31:08][352749382422091][3197 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:31:08][352749382422091][3197 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8924\"}'\'' -e'"" [2025-08-23 13:31:08][352749382422091][3197 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:31:08][352749382422091][3197 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8924\"}'\'' -e'"" [2025-08-23 13:31:15][352749382422091][10257 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:31:15][352749382422091][10413 ms][DEBUG] proc_open done in 7216 ms; code=255; res.len=115 [2025-08-23 13:31:15][352749382422091][10413 ms][DEBUG] END runCmdUntilRes#1 in 7217 ms [2025-08-23 13:31:15][352749382422091][10413 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:31:16][][0 ms][INFO] === Request start === [2025-08-23 13:31:16][][0 ms][DEBUG] START check_scloud [2025-08-23 13:31:16][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:31:16][][344 ms][DEBUG] SU: done in 344 ms; outu0_a118 7987 5017 23492384 123940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:31:16][][344 ms][DEBUG] targetPkg: running [2025-08-23 13:31:16][][344 ms][DEBUG] END check_scloud in 344 ms [2025-08-23 13:31:16][][344 ms][DEBUG] START check_boot_completed [2025-08-23 13:31:16][][345 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:31:16][][391 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:31:16][][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:31:16][][438 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:31:16][][438 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:31:16][][438 ms][DEBUG] rawBody.length=1130 [2025-08-23 13:31:16][][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50YPN8X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7563\"}'\'' -e'"" [2025-08-23 13:31:16][][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:31:16][][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50YPN8X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7563\"}'\'' -e'"" [2025-08-23 13:31:21][][5015 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:31:21][][5171 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=107 [2025-08-23 13:31:21][][5171 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-23 13:31:21][][5171 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:31:22][352749382422091][0 ms][INFO] === Request start === [2025-08-23 13:31:22][352749382422091][1 ms][DEBUG] START check_scloud [2025-08-23 13:31:22][352749382422091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:31:22][352749382422091][377 ms][DEBUG] SU: done in 376 ms; outu0_a118 7987 5017 23622440 120960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:31:22][352749382422091][377 ms][DEBUG] targetPkg: running [2025-08-23 13:31:22][352749382422091][377 ms][DEBUG] END check_scloud in 376 ms [2025-08-23 13:31:22][352749382422091][377 ms][DEBUG] START check_boot_completed [2025-08-23 13:31:22][352749382422091][377 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:31:22][352749382422091][424 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:31:22][352749382422091][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:31:22][352749382422091][486 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:31:22][352749382422091][486 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:31:22][352749382422091][486 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:31:22][352749382422091][486 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8593\"}'\'' -e'"" [2025-08-23 13:31:22][352749382422091][486 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:31:22][352749382422091][486 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8593\"}'\'' -e'"" [2025-08-23 13:31:28][352749382422091][6391 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_349a2bc8-cf28-43cc-960e-36e905be4aa2","id":"QR_349a2bc8-cf28-43cc-960e-36e905be4aa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:31:28][352749382422091][6547 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-08-23 13:31:28][352749382422091][6547 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-08-23 13:31:28][352749382422091][6547 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:31:32][351813977583583][0 ms][INFO] === Request start === [2025-08-23 13:31:32][351813977583583][1 ms][DEBUG] START check_scloud [2025-08-23 13:31:32][351813977583583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:31:33][351813977583583][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 7987 5017 23749592 97376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:31:33][351813977583583][311 ms][DEBUG] targetPkg: running [2025-08-23 13:31:33][351813977583583][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 13:31:33][351813977583583][311 ms][DEBUG] START check_boot_completed [2025-08-23 13:31:33][351813977583583][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:31:33][351813977583583][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:31:33][351813977583583][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:31:33][351813977583583][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:31:33][351813977583583][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:31:33][351813977583583][404 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:31:33][351813977583583][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813977583583\",\"model\":\"SM-A266M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6279\"}'\'' -e'"" [2025-08-23 13:31:33][351813977583583][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:31:33][351813977583583][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813977583583\",\"model\":\"SM-A266M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6279\"}'\'' -e'"" [2025-08-23 13:31:39][351813977583583][6981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2b16519-b8d3-4c6f-b0f2-e4f183625eb2","id":"QR_b2b16519-b8d3-4c6f-b0f2-e4f183625eb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:31:39][351813977583583][7137 ms][DEBUG] proc_open done in 6733 ms; code=255; res.len=3343 [2025-08-23 13:31:39][351813977583583][7137 ms][DEBUG] END runCmdUntilRes#1 in 6733 ms [2025-08-23 13:31:39][351813977583583][7137 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:32:03][352549933575987][0 ms][INFO] === Request start === [2025-08-23 13:32:03][352549933575987][1 ms][DEBUG] START check_scloud [2025-08-23 13:32:03][352549933575987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:32:03][352549933575987][444 ms][DEBUG] SU: done in 444 ms; outu0_a118 7987 5017 23784224 70892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:32:03][352549933575987][445 ms][DEBUG] targetPkg: running [2025-08-23 13:32:03][352549933575987][445 ms][DEBUG] END check_scloud in 444 ms [2025-08-23 13:32:03][352549933575987][445 ms][DEBUG] START check_boot_completed [2025-08-23 13:32:03][352549933575987][445 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:32:03][352549933575987][491 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:32:03][352549933575987][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:32:03][352549933575987][554 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:32:03][352549933575987][554 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:32:03][352549933575987][554 ms][DEBUG] START check_internet [2025-08-23 13:32:03][352549933575987][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:32:04][352549933575987][913 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.336/139.336/139.336/0.000 ms\n [2025-08-23 13:32:04][352549933575987][913 ms][DEBUG] check_internet: online [2025-08-23 13:32:04][352549933575987][913 ms][DEBUG] END check_internet in 359 ms [2025-08-23 13:32:04][352549933575987][913 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:32:04][352549933575987][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2594\"}'\'' -e'"" [2025-08-23 13:32:04][352549933575987][914 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:32:04][352549933575987][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2594\"}'\'' -e'"" [2025-08-23 13:32:09][352549933575987][5959 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:32:09][352549933575987][6115 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=115 [2025-08-23 13:32:09][352549933575987][6115 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-23 13:32:09][352549933575987][6115 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:32:09][][1 ms][INFO] === Request start === [2025-08-23 13:32:09][][1 ms][DEBUG] START check_scloud [2025-08-23 13:32:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:32:09][][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7987 5017 23934888 81896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:32:09][][317 ms][DEBUG] targetPkg: running [2025-08-23 13:32:09][][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 13:32:09][][317 ms][DEBUG] START check_boot_completed [2025-08-23 13:32:09][][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:32:09][][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:32:09][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:32:10][][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:32:10][][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:32:10][][426 ms][DEBUG] START check_internet [2025-08-23 13:32:10][][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:32:10][][676 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.412/145.412/145.412/0.000 ms\n [2025-08-23 13:32:10][][676 ms][DEBUG] check_internet: online [2025-08-23 13:32:10][][676 ms][DEBUG] END check_internet in 250 ms [2025-08-23 13:32:10][][676 ms][DEBUG] rawBody.length=1129 [2025-08-23 13:32:10][][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9079\"}'\'' -e'"" [2025-08-23 13:32:10][][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:32:10][][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9079\"}'\'' -e'"" [2025-08-23 13:32:13][][4144 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 13:32:13][][4300 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-23 13:32:13][][4300 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-23 13:32:13][][4300 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 13:32:16][352549933575987][0 ms][INFO] === Request start === [2025-08-23 13:32:16][352549933575987][1 ms][DEBUG] START check_scloud [2025-08-23 13:32:16][352549933575987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:32:17][352549933575987][410 ms][DEBUG] SU: done in 409 ms; outu0_a118 7987 5017 24116400 99280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:32:17][352549933575987][410 ms][DEBUG] targetPkg: running [2025-08-23 13:32:17][352549933575987][410 ms][DEBUG] END check_scloud in 410 ms [2025-08-23 13:32:17][352549933575987][410 ms][DEBUG] START check_boot_completed [2025-08-23 13:32:17][352549933575987][410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:32:17][352549933575987][457 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:32:17][352549933575987][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:32:17][352549933575987][519 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:32:17][352549933575987][519 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:32:17][352549933575987][519 ms][DEBUG] START check_internet [2025-08-23 13:32:17][352549933575987][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.469/134.469/134.469/0.000 ms\n [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] check_internet: online [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] END check_internet in 250 ms [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:32:17][352549933575987][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6098\"}'\'' -e'"" [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:32:17][352549933575987][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6098\"}'\'' -e'"" [2025-08-23 13:32:25][352549933575987][8549 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c46ae45-8dc3-42dd-a02c-8600a761fd69","id":"QR_6c46ae45-8dc3-42dd-a02c-8600a761fd69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:32:25][352549933575987][8705 ms][DEBUG] proc_open done in 7934 ms; code=255; res.len=3343 [2025-08-23 13:32:25][352549933575987][8705 ms][DEBUG] END runCmdUntilRes#1 in 7935 ms [2025-08-23 13:32:25][352549933575987][8705 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:33:04][353428899155911][0 ms][INFO] === Request start === [2025-08-23 13:33:04][353428899155911][1 ms][DEBUG] START check_scloud [2025-08-23 13:33:04][353428899155911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:33:05][353428899155911][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 7987 5017 24238220 89748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:33:05][353428899155911][282 ms][DEBUG] targetPkg: running [2025-08-23 13:33:05][353428899155911][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 13:33:05][353428899155911][282 ms][DEBUG] START check_boot_completed [2025-08-23 13:33:05][353428899155911][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:33:05][353428899155911][328 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:33:05][353428899155911][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:33:05][353428899155911][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:33:05][353428899155911][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:33:05][353428899155911][391 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:33:05][353428899155911][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899155911\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1004\"}'\'' -e'"" [2025-08-23 13:33:05][353428899155911][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:33:05][353428899155911][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899155911\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1004\"}'\'' -e'"" [2025-08-23 13:33:10][353428899155911][5343 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_822ba63e-52b8-4e2b-befe-a3628838c63f","id":"QR_822ba63e-52b8-4e2b-befe-a3628838c63f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:33:10][353428899155911][5499 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-23 13:33:10][353428899155911][5499 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-23 13:33:10][353428899155911][5499 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:33:15][351642486990959][0 ms][INFO] === Request start === [2025-08-23 13:33:15][351642486990959][1 ms][DEBUG] START check_scloud [2025-08-23 13:33:15][351642486990959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:33:15][351642486990959][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 7987 5017 24389832 105400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:33:15][351642486990959][336 ms][DEBUG] targetPkg: running [2025-08-23 13:33:15][351642486990959][336 ms][DEBUG] END check_scloud in 335 ms [2025-08-23 13:33:15][351642486990959][336 ms][DEBUG] START check_boot_completed [2025-08-23 13:33:15][351642486990959][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:33:15][351642486990959][383 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:33:15][351642486990959][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:33:15][351642486990959][431 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 13:33:15][351642486990959][431 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 13:33:15][351642486990959][431 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:33:15][351642486990959][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486990959\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4721\"}'\'' -e'"" [2025-08-23 13:33:15][351642486990959][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:33:15][351642486990959][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486990959\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4721\"}'\'' -e'"" [2025-08-23 13:33:19][351642486990959][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2abd6ec-968d-476d-b3dc-290449ca4a24","id":"QR_f2abd6ec-968d-476d-b3dc-290449ca4a24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:33:19][351642486990959][4678 ms][DEBUG] proc_open done in 4247 ms; code=255; res.len=3343 [2025-08-23 13:33:19][351642486990959][4678 ms][DEBUG] END runCmdUntilRes#1 in 4247 ms [2025-08-23 13:33:19][351642486990959][4679 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:34:03][352927940575903][0 ms][INFO] === Request start === [2025-08-23 13:34:03][352927940575903][1 ms][DEBUG] START check_scloud [2025-08-23 13:34:03][352927940575903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:34:04][352927940575903][370 ms][DEBUG] SU: done in 370 ms; out [2025-08-23 13:34:04][352927940575903][371 ms][WARN] targetPkg: not running, restarting [2025-08-23 13:34:04][352927940575903][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:34:04][352927940575903][511 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:34:04][352927940575903][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:34:04][352927940575903][808 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:34:06][352927940575903][2823 ms][DEBUG] END check_scloud in 2822 ms [2025-08-23 13:34:06][352927940575903][2823 ms][DEBUG] START check_boot_completed [2025-08-23 13:34:06][352927940575903][2823 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:34:06][352927940575903][2870 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:34:06][352927940575903][2870 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:34:06][352927940575903][2932 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:34:06][352927940575903][2932 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 13:34:06][352927940575903][2933 ms][DEBUG] START check_internet [2025-08-23 13:34:06][352927940575903][2933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:34:07][352927940575903][3354 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.617/206.617/206.617/0.000 ms\n [2025-08-23 13:34:07][352927940575903][3354 ms][DEBUG] check_internet: online [2025-08-23 13:34:07][352927940575903][3354 ms][DEBUG] END check_internet in 422 ms [2025-08-23 13:34:07][352927940575903][3354 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:34:07][352927940575903][3354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940575903\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3869\"}'\'' -e'"" [2025-08-23 13:34:07][352927940575903][3354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:34:07][352927940575903][3355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940575903\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3869\"}'\'' -e'"" [2025-08-23 13:34:14][352927940575903][10274 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f396f573-edcd-41c9-b0d4-5fec3955fc92","id":"QR_f396f573-edcd-41c9-b0d4-5fec3955fc92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:34:14][352927940575903][10430 ms][DEBUG] proc_open done in 7075 ms; code=255; res.len=3343 [2025-08-23 13:34:14][352927940575903][10430 ms][DEBUG] END runCmdUntilRes#1 in 7076 ms [2025-08-23 13:34:14][352927940575903][10430 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:35:04][353170568454239][1 ms][INFO] === Request start === [2025-08-23 13:35:04][353170568454239][1 ms][DEBUG] START check_scloud [2025-08-23 13:35:04][353170568454239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:35:04][353170568454239][333 ms][DEBUG] SU: done in 331 ms; outu0_a118 22193 19068 23562420 70156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:35:04][353170568454239][333 ms][DEBUG] targetPkg: running [2025-08-23 13:35:04][353170568454239][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-23 13:35:04][353170568454239][333 ms][DEBUG] START check_boot_completed [2025-08-23 13:35:04][353170568454239][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:35:04][353170568454239][379 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:35:04][353170568454239][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:35:04][353170568454239][458 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 13:35:04][353170568454239][458 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 13:35:04][353170568454239][458 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:35:04][353170568454239][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568454239\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9709\"}'\'' -e'"" [2025-08-23 13:35:04][353170568454239][458 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:35:04][353170568454239][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568454239\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9709\"}'\'' -e'"" [2025-08-23 13:35:09][353170568454239][4956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbc6c25e-c136-489a-b978-9907a7c67e57","id":"QR_bbc6c25e-c136-489a-b978-9907a7c67e57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:35:09][353170568454239][5113 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-23 13:35:09][353170568454239][5113 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-23 13:35:09][353170568454239][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:35:13][355458541791373][0 ms][INFO] === Request start === [2025-08-23 13:35:13][355458541791373][1 ms][DEBUG] START check_scloud [2025-08-23 13:35:13][355458541791373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:35:13][355458541791373][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22193 19068 23696828 88476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:35:13][355458541791373][315 ms][DEBUG] targetPkg: running [2025-08-23 13:35:13][355458541791373][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 13:35:13][355458541791373][315 ms][DEBUG] START check_boot_completed [2025-08-23 13:35:13][355458541791373][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:35:13][355458541791373][377 ms][DEBUG] ADB: done in 62 ms; out [2025-08-23 13:35:13][355458541791373][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:35:13][355458541791373][471 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 13:35:13][355458541791373][471 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-23 13:35:13][355458541791373][471 ms][DEBUG] rawBody.length=1158 [2025-08-23 13:35:13][355458541791373][471 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355458541791373\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB0VQAWJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6742\"}'\'' -e'"" [2025-08-23 13:35:13][355458541791373][472 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:35:13][355458541791373][472 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355458541791373\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB0VQAWJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6742\"}'\'' -e'"" [2025-08-23 13:35:17][355458541791373][4923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27ae504b-cb6f-4025-bad2-361865fdf355","id":"QR_27ae504b-cb6f-4025-bad2-361865fdf355","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:35:18][355458541791373][5079 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-23 13:35:18][355458541791373][5079 ms][DEBUG] END runCmdUntilRes#1 in 4607 ms [2025-08-23 13:35:18][355458541791373][5079 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:37:02][353475121767146][1 ms][INFO] === Request start === [2025-08-23 13:37:02][353475121767146][1 ms][DEBUG] START check_scloud [2025-08-23 13:37:02][353475121767146][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:37:03][353475121767146][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 22193 19068 23785136 96176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:37:03][353475121767146][311 ms][DEBUG] targetPkg: running [2025-08-23 13:37:03][353475121767146][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 13:37:03][353475121767146][311 ms][DEBUG] START check_boot_completed [2025-08-23 13:37:03][353475121767146][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:37:03][353475121767146][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:37:03][353475121767146][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:37:03][353475121767146][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:37:03][353475121767146][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:37:03][353475121767146][420 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:37:03][353475121767146][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121767146\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4831\"}'\'' -e'"" [2025-08-23 13:37:03][353475121767146][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:37:03][353475121767146][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121767146\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4831\"}'\'' -e'"" [2025-08-23 13:37:07][353475121767146][4715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2887fda5-7148-48d5-b1ba-5c14e9aa8a1f","id":"QR_2887fda5-7148-48d5-b1ba-5c14e9aa8a1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:37:07][353475121767146][4872 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-23 13:37:07][353475121767146][4872 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-23 13:37:07][353475121767146][4872 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:38:03][358475772094142][0 ms][INFO] === Request start === [2025-08-23 13:38:03][358475772094142][1 ms][DEBUG] START check_scloud [2025-08-23 13:38:03][358475772094142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:38:03][358475772094142][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 22193 19068 23932756 100776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:38:03][358475772094142][329 ms][DEBUG] targetPkg: running [2025-08-23 13:38:03][358475772094142][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-23 13:38:03][358475772094142][329 ms][DEBUG] START check_boot_completed [2025-08-23 13:38:03][358475772094142][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:38:03][358475772094142][376 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:38:03][358475772094142][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:38:04][358475772094142][423 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:38:04][358475772094142][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:38:04][358475772094142][423 ms][DEBUG] START check_internet [2025-08-23 13:38:04][358475772094142][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:38:04][358475772094142][923 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.956/197.956/197.956/0.000 ms\n [2025-08-23 13:38:04][358475772094142][923 ms][DEBUG] check_internet: online [2025-08-23 13:38:04][358475772094142][923 ms][DEBUG] END check_internet in 501 ms [2025-08-23 13:38:04][358475772094142][923 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:38:04][358475772094142][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475772094142\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3266\"}'\'' -e'"" [2025-08-23 13:38:04][358475772094142][924 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:38:04][358475772094142][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475772094142\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3266\"}'\'' -e'"" [2025-08-23 13:38:08][358475772094142][5078 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f21ed50-d446-41a9-b5ce-527c35e0f24b","id":"QR_8f21ed50-d446-41a9-b5ce-527c35e0f24b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:38:08][358475772094142][5234 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-23 13:38:08][358475772094142][5234 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-23 13:38:08][358475772094142][5234 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:38:11][354890382286876][0 ms][INFO] === Request start === [2025-08-23 13:38:11][354890382286876][1 ms][DEBUG] START check_scloud [2025-08-23 13:38:11][354890382286876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:38:11][354890382286876][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22193 19068 24112156 111976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:38:11][354890382286876][308 ms][DEBUG] targetPkg: running [2025-08-23 13:38:11][354890382286876][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 13:38:11][354890382286876][308 ms][DEBUG] START check_boot_completed [2025-08-23 13:38:11][354890382286876][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:38:11][354890382286876][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:38:11][354890382286876][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:38:11][354890382286876][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:38:11][354890382286876][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:38:11][354890382286876][417 ms][DEBUG] START check_internet [2025-08-23 13:38:11][354890382286876][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:38:12][354890382286876][761 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.488/126.488/126.488/0.000 ms\n [2025-08-23 13:38:12][354890382286876][761 ms][DEBUG] check_internet: online [2025-08-23 13:38:12][354890382286876][761 ms][DEBUG] END check_internet in 344 ms [2025-08-23 13:38:12][354890382286876][761 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:38:12][354890382286876][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354890382286876\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8393\"}'\'' -e'"" [2025-08-23 13:38:12][354890382286876][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:38:12][354890382286876][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354890382286876\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8393\"}'\'' -e'"" [2025-08-23 13:38:15][354890382286876][4588 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b36ba8b-947c-4a99-bba8-daa4467003b2","id":"QR_5b36ba8b-947c-4a99-bba8-daa4467003b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:38:16][354890382286876][4744 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-08-23 13:38:16][354890382286876][4744 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-08-23 13:38:16][354890382286876][4744 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:39:04][351272339374167][1 ms][INFO] === Request start === [2025-08-23 13:39:04][351272339374167][1 ms][DEBUG] START check_scloud [2025-08-23 13:39:04][351272339374167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:39:04][351272339374167][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 22193 19068 24213660 123340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:39:04][351272339374167][257 ms][DEBUG] targetPkg: running [2025-08-23 13:39:04][351272339374167][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 13:39:04][351272339374167][257 ms][DEBUG] START check_boot_completed [2025-08-23 13:39:04][351272339374167][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:39:04][351272339374167][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:39:04][351272339374167][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:39:04][351272339374167][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:39:04][351272339374167][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:39:04][351272339374167][335 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:39:04][351272339374167][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339374167\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-08-23 13:39:04][351272339374167][335 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:39:04][351272339374167][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339374167\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-08-23 13:39:08][351272339374167][4209 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_495c5fce-93e1-499d-acb7-90d4322571e4","id":"QR_495c5fce-93e1-499d-acb7-90d4322571e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:39:08][351272339374167][4365 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 13:39:08][351272339374167][4365 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 13:39:08][351272339374167][4365 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:43:03][351877477907931][1 ms][INFO] === Request start === [2025-08-23 13:43:03][351877477907931][1 ms][DEBUG] START check_scloud [2025-08-23 13:43:03][351877477907931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:43:03][351877477907931][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22193 19068 24374656 135036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:43:03][351877477907931][314 ms][DEBUG] targetPkg: running [2025-08-23 13:43:03][351877477907931][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 13:43:03][351877477907931][314 ms][DEBUG] START check_boot_completed [2025-08-23 13:43:03][351877477907931][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:43:03][351877477907931][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:43:03][351877477907931][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:43:03][351877477907931][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:43:03][351877477907931][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:43:03][351877477907931][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:43:03][351877477907931][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477907931\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2791\"}'\'' -e'"" [2025-08-23 13:43:03][351877477907931][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:43:03][351877477907931][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477907931\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2791\"}'\'' -e'"" [2025-08-23 13:43:07][351877477907931][4625 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_395c9486-93f9-4594-afc5-d753512d884d","id":"QR_395c9486-93f9-4594-afc5-d753512d884d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:43:07][351877477907931][4781 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 13:43:07][351877477907931][4782 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 13:43:07][351877477907931][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:44:03][351752860578336][0 ms][INFO] === Request start === [2025-08-23 13:44:03][351752860578336][1 ms][DEBUG] START check_scloud [2025-08-23 13:44:03][351752860578336][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:44:03][351752860578336][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 22193 19068 24501916 146804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:44:03][351752860578336][317 ms][DEBUG] targetPkg: running [2025-08-23 13:44:03][351752860578336][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 13:44:03][351752860578336][317 ms][DEBUG] START check_boot_completed [2025-08-23 13:44:03][351752860578336][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:44:03][351752860578336][362 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 13:44:03][351752860578336][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:44:03][351752860578336][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:44:03][351752860578336][409 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 13:44:03][351752860578336][409 ms][DEBUG] START check_internet [2025-08-23 13:44:03][351752860578336][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:44:04][351752860578336][862 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.111/203.111/203.111/0.000 ms\n [2025-08-23 13:44:04][351752860578336][862 ms][DEBUG] check_internet: online [2025-08-23 13:44:04][351752860578336][862 ms][DEBUG] END check_internet in 453 ms [2025-08-23 13:44:04][351752860578336][862 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:44:04][351752860578336][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752860578336\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4094\"}'\'' -e'"" [2025-08-23 13:44:04][351752860578336][863 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:44:04][351752860578336][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752860578336\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4094\"}'\'' -e'"" [2025-08-23 13:44:08][351752860578336][5205 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54a1c91a-6db9-40e4-923e-30661356c835","id":"QR_54a1c91a-6db9-40e4-923e-30661356c835","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:44:08][351752860578336][5361 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-23 13:44:08][351752860578336][5361 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-23 13:44:08][351752860578336][5361 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:46:03][353809893503695][1 ms][INFO] === Request start === [2025-08-23 13:46:03][353809893503695][1 ms][DEBUG] START check_scloud [2025-08-23 13:46:03][353809893503695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:46:03][353809893503695][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 22193 19068 24619264 157488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:46:03][353809893503695][329 ms][DEBUG] targetPkg: running [2025-08-23 13:46:03][353809893503695][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-23 13:46:03][353809893503695][329 ms][DEBUG] START check_boot_completed [2025-08-23 13:46:03][353809893503695][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:46:03][353809893503695][376 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:46:03][353809893503695][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:46:03][353809893503695][423 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:46:03][353809893503695][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:46:03][353809893503695][423 ms][DEBUG] START check_internet [2025-08-23 13:46:03][353809893503695][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:46:04][353809893503695][735 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.500/211.500/211.500/0.000 ms\n [2025-08-23 13:46:04][353809893503695][735 ms][DEBUG] check_internet: online [2025-08-23 13:46:04][353809893503695][736 ms][DEBUG] END check_internet in 313 ms [2025-08-23 13:46:04][353809893503695][736 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:46:04][353809893503695][736 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809893503695\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9223\"}'\'' -e'"" [2025-08-23 13:46:04][353809893503695][736 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:46:04][353809893503695][736 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809893503695\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9223\"}'\'' -e'"" [2025-08-23 13:46:08][353809893503695][4969 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eaba0e28-6046-4d41-b825-9c8f62ecbcc1","id":"QR_eaba0e28-6046-4d41-b825-9c8f62ecbcc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:46:08][353809893503695][5125 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 13:46:08][353809893503695][5125 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 13:46:08][353809893503695][5125 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:46:11][350234453206022][0 ms][INFO] === Request start === [2025-08-23 13:46:11][350234453206022][1 ms][DEBUG] START check_scloud [2025-08-23 13:46:11][350234453206022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:46:11][350234453206022][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22193 19068 24784200 168812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:46:11][350234453206022][308 ms][DEBUG] targetPkg: running [2025-08-23 13:46:11][350234453206022][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 13:46:11][350234453206022][308 ms][DEBUG] START check_boot_completed [2025-08-23 13:46:11][350234453206022][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:46:11][350234453206022][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:46:11][350234453206022][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:46:11][350234453206022][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:46:11][350234453206022][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:46:11][350234453206022][402 ms][DEBUG] START check_internet [2025-08-23 13:46:11][350234453206022][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.128/253.128/253.128/0.000 ms\n [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] check_internet: online [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] END check_internet in 359 ms [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:46:11][350234453206022][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350234453206022\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6897\"}'\'' -e'"" [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:46:11][350234453206022][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350234453206022\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6897\"}'\'' -e'"" [2025-08-23 13:46:15][350234453206022][4510 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b354535e-bd42-4b87-ae61-857101d1f1bc","id":"QR_b354535e-bd42-4b87-ae61-857101d1f1bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:46:15][350234453206022][4666 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-23 13:46:15][350234453206022][4666 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-23 13:46:15][350234453206022][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:47:03][351676562039455][0 ms][INFO] === Request start === [2025-08-23 13:47:03][351676562039455][1 ms][DEBUG] START check_scloud [2025-08-23 13:47:03][351676562039455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:47:03][351676562039455][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 22193 19068 24873484 180636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:47:03][351676562039455][277 ms][DEBUG] targetPkg: running [2025-08-23 13:47:03][351676562039455][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 13:47:03][351676562039455][277 ms][DEBUG] START check_boot_completed [2025-08-23 13:47:03][351676562039455][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:47:04][351676562039455][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:47:04][351676562039455][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:47:04][351676562039455][417 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 13:47:04][351676562039455][417 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 13:47:04][351676562039455][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:47:04][351676562039455][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3971\"}'\'' -e'"" [2025-08-23 13:47:04][351676562039455][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:47:04][351676562039455][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3971\"}'\'' -e'"" [2025-08-23 13:47:08][351676562039455][4791 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:47:08][351676562039455][4792 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 13:47:08][351676562039455][4792 ms][WARN] Detected error: Process with pid 22193 either refused to load frida-agent, or terminated during injection [2025-08-23 13:47:08][351676562039455][4792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:47:08][351676562039455][4948 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 13:47:08][351676562039455][4948 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:47:08][351676562039455][4948 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:47:08][351676562039455][5088 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:47:08][351676562039455][5088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:47:08][351676562039455][5260 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:47:10][351676562039455][7275 ms][DEBUG] START check_boot_completed [2025-08-23 13:47:10][351676562039455][7275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:47:11][351676562039455][7322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:47:11][351676562039455][7322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:47:11][351676562039455][7369 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:47:11][351676562039455][7369 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:47:14][351676562039455][10383 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:47:14][351676562039455][10384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3971\"}'\'' -e'"" [2025-08-23 13:47:18][351676562039455][14398 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01142da9-171f-4efc-b769-589ca5e3ef46","id":"QR_01142da9-171f-4efc-b769-589ca5e3ef46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:47:18][351676562039455][14555 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 13:47:18][351676562039455][14555 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-23 13:47:18][351676562039455][14555 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:47:20][354772952105860][0 ms][INFO] === Request start === [2025-08-23 13:47:20][354772952105860][1 ms][DEBUG] START check_scloud [2025-08-23 13:47:20][354772952105860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:47:21][354772952105860][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 31808 19068 23571840 123120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:47:21][354772952105860][240 ms][DEBUG] targetPkg: running [2025-08-23 13:47:21][354772952105860][240 ms][DEBUG] END check_scloud in 239 ms [2025-08-23 13:47:21][354772952105860][240 ms][DEBUG] START check_boot_completed [2025-08-23 13:47:21][354772952105860][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:47:21][354772952105860][285 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 13:47:21][354772952105860][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:47:21][354772952105860][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:47:21][354772952105860][332 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 13:47:21][354772952105860][332 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:47:21][354772952105860][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772952105860\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6212\"}'\'' -e'"" [2025-08-23 13:47:21][354772952105860][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:47:21][354772952105860][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772952105860\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6212\"}'\'' -e'"" [2025-08-23 13:47:24][354772952105860][4002 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10e532ce-8cf2-4fed-aa66-80c415b025f0","id":"QR_10e532ce-8cf2-4fed-aa66-80c415b025f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:47:24][354772952105860][4159 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-23 13:47:24][354772952105860][4159 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-23 13:47:24][354772952105860][4159 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:51:03][351477971251629][1 ms][INFO] === Request start === [2025-08-23 13:51:03][351477971251629][1 ms][DEBUG] START check_scloud [2025-08-23 13:51:03][351477971251629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:51:03][351477971251629][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 31808 19068 23600784 136804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:51:03][351477971251629][297 ms][DEBUG] targetPkg: running [2025-08-23 13:51:03][351477971251629][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 13:51:03][351477971251629][297 ms][DEBUG] START check_boot_completed [2025-08-23 13:51:03][351477971251629][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:51:04][351477971251629][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:51:04][351477971251629][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:51:04][351477971251629][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:51:04][351477971251629][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:51:04][351477971251629][375 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:51:04][351477971251629][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971251629\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2161\"}'\'' -e'"" [2025-08-23 13:51:04][351477971251629][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:51:04][351477971251629][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971251629\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2161\"}'\'' -e'"" [2025-08-23 13:51:08][351477971251629][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2965f18a-8923-4c53-afd0-45f21d93914c","id":"QR_2965f18a-8923-4c53-afd0-45f21d93914c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:51:08][351477971251629][4514 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 13:51:08][351477971251629][4515 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 13:51:08][351477971251629][4515 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:51:10][353437178816119][0 ms][INFO] === Request start === [2025-08-23 13:51:10][353437178816119][1 ms][DEBUG] START check_scloud [2025-08-23 13:51:10][353437178816119][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:51:11][353437178816119][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 31808 19068 23747288 148340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:51:11][353437178816119][320 ms][DEBUG] targetPkg: running [2025-08-23 13:51:11][353437178816119][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 13:51:11][353437178816119][320 ms][DEBUG] START check_boot_completed [2025-08-23 13:51:11][353437178816119][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:51:11][353437178816119][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:51:11][353437178816119][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:51:11][353437178816119][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:51:11][353437178816119][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:51:11][353437178816119][414 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:51:11][353437178816119][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437178816119\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2498\"}'\'' -e'"" [2025-08-23 13:51:11][353437178816119][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:51:11][353437178816119][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437178816119\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2498\"}'\'' -e'"" [2025-08-23 13:51:15][353437178816119][4241 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b68af85e-4850-4fa5-b095-1df7c44fb6ab","id":"QR_b68af85e-4850-4fa5-b095-1df7c44fb6ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:51:15][353437178816119][4397 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 13:51:15][353437178816119][4397 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-08-23 13:51:15][353437178816119][4398 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:51:17][352677530389351][0 ms][INFO] === Request start === [2025-08-23 13:51:17][352677530389351][1 ms][DEBUG] START check_scloud [2025-08-23 13:51:17][352677530389351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:51:18][352677530389351][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 31808 19068 23919484 159336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:51:18][352677530389351][315 ms][DEBUG] targetPkg: running [2025-08-23 13:51:18][352677530389351][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 13:51:18][352677530389351][316 ms][DEBUG] START check_boot_completed [2025-08-23 13:51:18][352677530389351][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:51:18][352677530389351][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:51:18][352677530389351][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:51:18][352677530389351][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:51:18][352677530389351][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:51:18][352677530389351][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:51:18][352677530389351][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-08-23 13:51:18][352677530389351][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:51:18][352677530389351][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-08-23 13:51:22][352677530389351][4174 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:51:22][352677530389351][4330 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=115 [2025-08-23 13:51:22][352677530389351][4330 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 13:51:22][352677530389351][4330 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:51:22][][0 ms][INFO] === Request start === [2025-08-23 13:51:22][][1 ms][DEBUG] START check_scloud [2025-08-23 13:51:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:51:22][][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 31808 19068 24072196 170184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:51:22][][265 ms][DEBUG] targetPkg: running [2025-08-23 13:51:22][][265 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 13:51:22][][265 ms][DEBUG] START check_boot_completed [2025-08-23 13:51:22][][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:51:22][][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:51:22][][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:51:22][][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:51:22][][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:51:22][][359 ms][DEBUG] rawBody.length=1129 [2025-08-23 13:51:22][][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40AHS7T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2458\"}'\'' -e'"" [2025-08-23 13:51:22][][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:51:22][][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40AHS7T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2458\"}'\'' -e'"" [2025-08-23 13:51:26][][3733 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 13:51:26][][3889 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=115 [2025-08-23 13:51:26][][3889 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-23 13:51:26][][3889 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 13:51:28][352677530389351][0 ms][INFO] === Request start === [2025-08-23 13:51:28][352677530389351][1 ms][DEBUG] START check_scloud [2025-08-23 13:51:28][352677530389351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:51:29][352677530389351][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 31808 19068 24177768 181276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:51:29][352677530389351][274 ms][DEBUG] targetPkg: running [2025-08-23 13:51:29][352677530389351][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-23 13:51:29][352677530389351][275 ms][DEBUG] START check_boot_completed [2025-08-23 13:51:29][352677530389351][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:51:29][352677530389351][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:51:29][352677530389351][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:51:29][352677530389351][384 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:51:29][352677530389351][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:51:29][352677530389351][384 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:51:29][352677530389351][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3670\"}'\'' -e'"" [2025-08-23 13:51:29][352677530389351][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:51:29][352677530389351][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3670\"}'\'' -e'"" [2025-08-23 13:51:34][352677530389351][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d972bfd-82c2-4a50-9caa-cfc207455f78","id":"QR_5d972bfd-82c2-4a50-9caa-cfc207455f78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:51:34][352677530389351][5914 ms][DEBUG] proc_open done in 5529 ms; code=255; res.len=3343 [2025-08-23 13:51:34][352677530389351][5914 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-08-23 13:51:34][352677530389351][5914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:52:03][354772952780092][0 ms][INFO] === Request start === [2025-08-23 13:52:03][354772952780092][1 ms][DEBUG] START check_scloud [2025-08-23 13:52:03][354772952780092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:52:04][354772952780092][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 31808 19068 24271072 184084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:52:04][354772952780092][286 ms][DEBUG] targetPkg: running [2025-08-23 13:52:04][354772952780092][286 ms][DEBUG] END check_scloud in 286 ms [2025-08-23 13:52:04][354772952780092][286 ms][DEBUG] START check_boot_completed [2025-08-23 13:52:04][354772952780092][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:52:04][354772952780092][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:52:04][354772952780092][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:52:04][354772952780092][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:52:04][354772952780092][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:52:04][354772952780092][396 ms][DEBUG] START check_internet [2025-08-23 13:52:04][354772952780092][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.389/201.389/201.389/0.000 ms\n [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] check_internet: online [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] END check_internet in 422 ms [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:52:04][354772952780092][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772952780092\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7576\"}'\'' -e'"" [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:52:04][354772952780092][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772952780092\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7576\"}'\'' -e'"" [2025-08-23 13:52:08][354772952780092][4925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cb14574-d048-4c2c-bec5-8224560a5495","id":"QR_5cb14574-d048-4c2c-bec5-8224560a5495","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:52:08][354772952780092][5082 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 13:52:08][354772952780092][5082 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 13:52:08][354772952780092][5082 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:54:03][352978602465123][1 ms][INFO] === Request start === [2025-08-23 13:54:03][352978602465123][1 ms][DEBUG] START check_scloud [2025-08-23 13:54:03][352978602465123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:54:03][352978602465123][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 31808 19068 24403204 177364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:54:03][352978602465123][315 ms][DEBUG] targetPkg: running [2025-08-23 13:54:03][352978602465123][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 13:54:03][352978602465123][315 ms][DEBUG] START check_boot_completed [2025-08-23 13:54:03][352978602465123][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:54:03][352978602465123][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:54:03][352978602465123][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:54:03][352978602465123][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:54:03][352978602465123][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:54:03][352978602465123][408 ms][DEBUG] START check_internet [2025-08-23 13:54:03][352978602465123][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.190/200.190/200.190/0.000 ms\n [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] check_internet: online [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] END check_internet in 485 ms [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:54:04][352978602465123][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978602465123\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2236\"}'\'' -e'"" [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:54:04][352978602465123][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978602465123\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2236\"}'\'' -e'"" [2025-08-23 13:54:08][352978602465123][5110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8b1448c-acf5-448b-8e57-05b756325945","id":"QR_b8b1448c-acf5-448b-8e57-05b756325945","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:54:08][352978602465123][5266 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 13:54:08][352978602465123][5266 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 13:54:08][352978602465123][5266 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:56:03][350196550757233][0 ms][INFO] === Request start === [2025-08-23 13:56:03][350196550757233][1 ms][DEBUG] START check_scloud [2025-08-23 13:56:03][350196550757233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:56:03][350196550757233][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 31808 19068 24561000 188208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:56:03][350196550757233][319 ms][DEBUG] targetPkg: running [2025-08-23 13:56:03][350196550757233][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 13:56:03][350196550757233][319 ms][DEBUG] START check_boot_completed [2025-08-23 13:56:03][350196550757233][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:56:03][350196550757233][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:56:03][350196550757233][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:56:03][350196550757233][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:56:03][350196550757233][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 13:56:03][350196550757233][412 ms][DEBUG] START check_internet [2025-08-23 13:56:03][350196550757233][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:56:04][350196550757233][850 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.799/202.799/202.799/0.000 ms\n [2025-08-23 13:56:04][350196550757233][850 ms][DEBUG] check_internet: online [2025-08-23 13:56:04][350196550757233][850 ms][DEBUG] END check_internet in 438 ms [2025-08-23 13:56:04][350196550757233][850 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:56:04][350196550757233][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350196550757233\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6931\"}'\'' -e'"" [2025-08-23 13:56:04][350196550757233][851 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:56:04][350196550757233][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350196550757233\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6931\"}'\'' -e'"" [2025-08-23 13:56:08][350196550757233][4911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12265eb4-a165-4fd4-8f84-1038f83f1fc4","id":"QR_12265eb4-a165-4fd4-8f84-1038f83f1fc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:56:08][350196550757233][5068 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-23 13:56:08][350196550757233][5068 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-23 13:56:08][350196550757233][5068 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:56:11][357962506818517][1 ms][INFO] === Request start === [2025-08-23 13:56:11][357962506818517][1 ms][DEBUG] START check_scloud [2025-08-23 13:56:11][357962506818517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:56:11][357962506818517][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31808 19068 24717808 197204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:56:11][357962506818517][298 ms][DEBUG] targetPkg: running [2025-08-23 13:56:11][357962506818517][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 13:56:11][357962506818517][298 ms][DEBUG] START check_boot_completed [2025-08-23 13:56:11][357962506818517][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:56:11][357962506818517][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:56:11][357962506818517][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:56:11][357962506818517][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:56:11][357962506818517][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:56:11][357962506818517][407 ms][DEBUG] START check_internet [2025-08-23 13:56:11][357962506818517][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.767/247.767/247.767/0.000 ms\n [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] check_internet: online [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] END check_internet in 375 ms [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:56:11][357962506818517][782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506818517\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:56:11][357962506818517][782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506818517\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-08-23 13:56:15][357962506818517][4672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c51aadf3-2ea9-4752-92fc-3254025845c7","id":"QR_c51aadf3-2ea9-4752-92fc-3254025845c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:56:15][357962506818517][4828 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-23 13:56:15][357962506818517][4828 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-23 13:56:15][357962506818517][4828 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:59:04][351978522695487][1 ms][INFO] === Request start === [2025-08-23 13:59:04][351978522695487][1 ms][DEBUG] START check_scloud [2025-08-23 13:59:04][351978522695487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:59:04][351978522695487][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31808 19068 24858096 197748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:59:04][351978522695487][314 ms][DEBUG] targetPkg: running [2025-08-23 13:59:04][351978522695487][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 13:59:04][351978522695487][314 ms][DEBUG] START check_boot_completed [2025-08-23 13:59:04][351978522695487][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:59:04][351978522695487][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 13:59:04][351978522695487][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:59:04][351978522695487][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:59:04][351978522695487][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 13:59:04][351978522695487][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:59:04][351978522695487][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522695487\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-08-23 13:59:04][351978522695487][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:59:04][351978522695487][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522695487\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-08-23 13:59:08][351978522695487][4313 ms][DEBUG] proc_open done in 3921 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 13:59:08][351978522695487][4313 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 13:59:08][351978522695487][4313 ms][WARN] Detected error: Process with pid 31808 either refused to load frida-agent, or terminated during injection [2025-08-23 13:59:08][351978522695487][4313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 13:59:08][351978522695487][4469 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 13:59:08][351978522695487][4470 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 13:59:08][351978522695487][4470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 13:59:08][351978522695487][4610 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 13:59:08][351978522695487][4610 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 13:59:08][351978522695487][4751 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 13:59:10][351978522695487][6766 ms][DEBUG] START check_boot_completed [2025-08-23 13:59:10][351978522695487][6766 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:59:10][351978522695487][6813 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:59:10][351978522695487][6813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:59:11][351978522695487][6860 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:59:11][351978522695487][6860 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:59:14][351978522695487][9874 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 13:59:14][351978522695487][9874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522695487\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-08-23 13:59:18][351978522695487][14139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6941bcfb-328c-4d67-83e9-ffb5b0317bf8","id":"QR_6941bcfb-328c-4d67-83e9-ffb5b0317bf8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:59:18][351978522695487][14295 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-23 13:59:18][351978522695487][14295 ms][DEBUG] END runCmdUntilRes#2 in 4421 ms [2025-08-23 13:59:18][351978522695487][14295 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:59:22][352053267871807][0 ms][INFO] === Request start === [2025-08-23 13:59:22][352053267871807][1 ms][DEBUG] START check_scloud [2025-08-23 13:59:22][352053267871807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:59:22][352053267871807][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 1228 19068 23595516 124740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:59:22][352053267871807][257 ms][DEBUG] targetPkg: running [2025-08-23 13:59:22][352053267871807][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 13:59:22][352053267871807][257 ms][DEBUG] START check_boot_completed [2025-08-23 13:59:22][352053267871807][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:59:22][352053267871807][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 13:59:22][352053267871807][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:59:22][352053267871807][366 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 13:59:22][352053267871807][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 13:59:22][352053267871807][366 ms][DEBUG] rawBody.length=1149 [2025-08-23 13:59:22][352053267871807][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267871807\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5536\"}'\'' -e'"" [2025-08-23 13:59:22][352053267871807][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:59:22][352053267871807][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267871807\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5536\"}'\'' -e'"" [2025-08-23 13:59:28][352053267871807][6412 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_738940ea-c88a-477b-a4b9-ec6b7fcd00f8","id":"QR_738940ea-c88a-477b-a4b9-ec6b7fcd00f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:59:28][352053267871807][6568 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-08-23 13:59:28][352053267871807][6568 ms][DEBUG] END runCmdUntilRes#1 in 6201 ms [2025-08-23 13:59:28][352053267871807][6568 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 13:59:34][356414817790291][0 ms][INFO] === Request start === [2025-08-23 13:59:34][356414817790291][1 ms][DEBUG] START check_scloud [2025-08-23 13:59:34][356414817790291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 13:59:34][356414817790291][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 1228 19068 23751344 137932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 13:59:34][356414817790291][310 ms][DEBUG] targetPkg: running [2025-08-23 13:59:34][356414817790291][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 13:59:34][356414817790291][310 ms][DEBUG] START check_boot_completed [2025-08-23 13:59:34][356414817790291][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 13:59:34][356414817790291][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 13:59:34][356414817790291][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 13:59:34][356414817790291][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 13:59:34][356414817790291][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 13:59:34][356414817790291][404 ms][DEBUG] rawBody.length=1148 [2025-08-23 13:59:34][356414817790291][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817790291\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-08-23 13:59:34][356414817790291][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 13:59:34][356414817790291][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817790291\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-08-23 13:59:38][356414817790291][4215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71362aba-be28-4576-b71d-c3aa0be80200","id":"QR_71362aba-be28-4576-b71d-c3aa0be80200","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 13:59:38][356414817790291][4371 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-23 13:59:38][356414817790291][4371 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 13:59:38][356414817790291][4371 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:03:03][352375456757335][1 ms][INFO] === Request start === [2025-08-23 14:03:03][352375456757335][1 ms][DEBUG] START check_scloud [2025-08-23 14:03:03][352375456757335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:03:03][352375456757335][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 1228 19068 23786960 150304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:03:03][352375456757335][268 ms][DEBUG] targetPkg: running [2025-08-23 14:03:03][352375456757335][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 14:03:03][352375456757335][268 ms][DEBUG] START check_boot_completed [2025-08-23 14:03:03][352375456757335][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:03:03][352375456757335][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:03:03][352375456757335][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:03:03][352375456757335][362 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:03:03][352375456757335][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:03:03][352375456757335][362 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:03:03][352375456757335][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375456757335\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8716\"}'\'' -e'"" [2025-08-23 14:03:03][352375456757335][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:03:03][352375456757335][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375456757335\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8716\"}'\'' -e'"" [2025-08-23 14:03:08][352375456757335][4532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8133ec77-83bc-423a-a3c3-bbbef88e5df0","id":"QR_8133ec77-83bc-423a-a3c3-bbbef88e5df0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:03:08][352375456757335][4688 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-23 14:03:08][352375456757335][4688 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-23 14:03:08][352375456757335][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:04:03][352308190552803][0 ms][INFO] === Request start === [2025-08-23 14:04:03][352308190552803][1 ms][DEBUG] START check_scloud [2025-08-23 14:04:03][352308190552803][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:04:03][352308190552803][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 1228 19068 23898676 161456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:04:03][352308190552803][260 ms][DEBUG] targetPkg: running [2025-08-23 14:04:03][352308190552803][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 14:04:03][352308190552803][261 ms][DEBUG] START check_boot_completed [2025-08-23 14:04:03][352308190552803][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:04:03][352308190552803][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:04:03][352308190552803][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:04:04][352308190552803][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:04:04][352308190552803][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:04:04][352308190552803][354 ms][DEBUG] START check_internet [2025-08-23 14:04:04][352308190552803][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:04:04][352308190552803][854 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.158/200.158/200.158/0.000 ms\n [2025-08-23 14:04:04][352308190552803][854 ms][DEBUG] check_internet: online [2025-08-23 14:04:04][352308190552803][854 ms][DEBUG] END check_internet in 500 ms [2025-08-23 14:04:04][352308190552803][854 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:04:04][352308190552803][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308190552803\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-08-23 14:04:04][352308190552803][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:04:04][352308190552803][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308190552803\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-08-23 14:04:08][352308190552803][4806 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f124031e-4de5-47de-95a9-afa98552788a","id":"QR_f124031e-4de5-47de-95a9-afa98552788a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:04:08][352308190552803][4962 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-23 14:04:08][352308190552803][4962 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 14:04:08][352308190552803][4962 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:05:03][358212587006700][0 ms][INFO] === Request start === [2025-08-23 14:05:03][358212587006700][1 ms][DEBUG] START check_scloud [2025-08-23 14:05:03][358212587006700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:05:04][358212587006700][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 1228 19068 24047384 172012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:05:04][358212587006700][260 ms][DEBUG] targetPkg: running [2025-08-23 14:05:04][358212587006700][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 14:05:04][358212587006700][260 ms][DEBUG] START check_boot_completed [2025-08-23 14:05:04][358212587006700][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:05:04][358212587006700][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:05:04][358212587006700][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:05:04][358212587006700][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:05:04][358212587006700][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:05:04][358212587006700][353 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:05:04][358212587006700][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587006700\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2417\"}'\'' -e'"" [2025-08-23 14:05:04][358212587006700][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:05:04][358212587006700][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587006700\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2417\"}'\'' -e'"" [2025-08-23 14:05:08][358212587006700][4446 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d3fe6bc-a034-4752-978c-37cbbe57991c","id":"QR_2d3fe6bc-a034-4752-978c-37cbbe57991c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:05:08][358212587006700][4602 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 14:05:08][358212587006700][4602 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 14:05:08][358212587006700][4602 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:05:10][355084250708356][1 ms][INFO] === Request start === [2025-08-23 14:05:10][355084250708356][1 ms][DEBUG] START check_scloud [2025-08-23 14:05:10][355084250708356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:05:11][355084250708356][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 1228 19068 24177568 183784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:05:11][355084250708356][307 ms][DEBUG] targetPkg: running [2025-08-23 14:05:11][355084250708356][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 14:05:11][355084250708356][307 ms][DEBUG] START check_boot_completed [2025-08-23 14:05:11][355084250708356][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:05:11][355084250708356][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:05:11][355084250708356][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:05:11][355084250708356][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:05:11][355084250708356][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:05:11][355084250708356][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:05:11][355084250708356][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250708356\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1093\"}'\'' -e'"" [2025-08-23 14:05:11][355084250708356][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:05:11][355084250708356][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250708356\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1093\"}'\'' -e'"" [2025-08-23 14:05:15][355084250708356][4072 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33389a25-059a-4e81-a9d2-f80f4ea5933a","id":"QR_33389a25-059a-4e81-a9d2-f80f4ea5933a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:05:15][355084250708356][4228 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-23 14:05:15][355084250708356][4228 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 14:05:15][355084250708356][4228 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:05:17][350832441840750][0 ms][INFO] === Request start === [2025-08-23 14:05:17][350832441840750][1 ms][DEBUG] START check_scloud [2025-08-23 14:05:17][350832441840750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:05:18][350832441840750][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 1228 19068 24326312 194736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:05:18][350832441840750][314 ms][DEBUG] targetPkg: running [2025-08-23 14:05:18][350832441840750][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 14:05:18][350832441840750][314 ms][DEBUG] START check_boot_completed [2025-08-23 14:05:18][350832441840750][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:05:18][350832441840750][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:05:18][350832441840750][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:05:18][350832441840750][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:05:18][350832441840750][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:05:18][350832441840750][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:05:18][350832441840750][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441840750\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-23 14:05:18][350832441840750][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:05:18][350832441840750][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441840750\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-23 14:05:21][350832441840750][4172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_284aaf7b-fc93-4996-90ae-8c93ffa7f452","id":"QR_284aaf7b-fc93-4996-90ae-8c93ffa7f452","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:05:22][350832441840750][4328 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-23 14:05:22][350832441840750][4328 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 14:05:22][350832441840750][4328 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:05:26][352448600056043][0 ms][INFO] === Request start === [2025-08-23 14:05:26][352448600056043][1 ms][DEBUG] START check_scloud [2025-08-23 14:05:26][352448600056043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:05:26][352448600056043][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 1228 19068 24462732 206720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:05:26][352448600056043][312 ms][DEBUG] targetPkg: running [2025-08-23 14:05:26][352448600056043][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 14:05:26][352448600056043][312 ms][DEBUG] START check_boot_completed [2025-08-23 14:05:26][352448600056043][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:05:26][352448600056043][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:05:26][352448600056043][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:05:26][352448600056043][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:05:26][352448600056043][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:05:26][352448600056043][391 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:05:26][352448600056043][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352448600056043\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5925\"}'\'' -e'"" [2025-08-23 14:05:26][352448600056043][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:05:26][352448600056043][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352448600056043\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5925\"}'\'' -e'"" [2025-08-23 14:05:32][352448600056043][6077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8580a8f5-13c8-42dc-bf6b-40f77e8960b4","id":"QR_8580a8f5-13c8-42dc-bf6b-40f77e8960b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:05:32][352448600056043][6233 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-08-23 14:05:32][352448600056043][6233 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 14:05:32][352448600056043][6233 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:06:08][354454653172222][0 ms][INFO] === Request start === [2025-08-23 14:06:08][354454653172222][1 ms][DEBUG] START check_scloud [2025-08-23 14:06:08][354454653172222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:06:08][354454653172222][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1228 19068 24533416 217572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:06:08][354454653172222][305 ms][DEBUG] targetPkg: running [2025-08-23 14:06:08][354454653172222][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 14:06:08][354454653172222][305 ms][DEBUG] START check_boot_completed [2025-08-23 14:06:08][354454653172222][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:06:08][354454653172222][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:06:08][354454653172222][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:06:09][354454653172222][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:06:09][354454653172222][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:06:09][354454653172222][414 ms][DEBUG] START check_internet [2025-08-23 14:06:09][354454653172222][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.110/200.110/200.110/0.000 ms\n [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] check_internet: online [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] END check_internet in 484 ms [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:06:09][354454653172222][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5710\"}'\'' -e'"" [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:06:09][354454653172222][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5710\"}'\'' -e'"" [2025-08-23 14:06:15][354454653172222][6866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64699d61-c896-4adb-b758-6d380787c4fe","id":"QR_64699d61-c896-4adb-b758-6d380787c4fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:06:15][354454653172222][7022 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-08-23 14:06:15][354454653172222][7022 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-08-23 14:06:15][354454653172222][7022 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:06:20][350637541325051][0 ms][INFO] === Request start === [2025-08-23 14:06:20][350637541325051][1 ms][DEBUG] START check_scloud [2025-08-23 14:06:20][350637541325051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:06:21][350637541325051][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 1228 19068 24708784 229304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:06:21][350637541325051][263 ms][DEBUG] targetPkg: running [2025-08-23 14:06:21][350637541325051][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 14:06:21][350637541325051][263 ms][DEBUG] START check_boot_completed [2025-08-23 14:06:21][350637541325051][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:06:21][350637541325051][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:06:21][350637541325051][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:06:21][350637541325051][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:06:21][350637541325051][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:06:21][350637541325051][372 ms][DEBUG] START check_internet [2025-08-23 14:06:21][350637541325051][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.981/235.981/235.981/0.000 ms\n [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] check_internet: online [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] END check_internet in 359 ms [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:06:21][350637541325051][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541325051\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:06:21][350637541325051][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541325051\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-23 14:06:25][350637541325051][4777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c35fe06-faf7-4efa-887d-92e2f07b8351","id":"QR_0c35fe06-faf7-4efa-887d-92e2f07b8351","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:06:25][350637541325051][4933 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 14:06:25][350637541325051][4933 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 14:06:25][350637541325051][4934 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:06:28][350832440555177][0 ms][INFO] === Request start === [2025-08-23 14:06:28][350832440555177][1 ms][DEBUG] START check_scloud [2025-08-23 14:06:28][350832440555177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:06:28][350832440555177][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1228 19068 24855480 240852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:06:28][350832440555177][308 ms][DEBUG] targetPkg: running [2025-08-23 14:06:28][350832440555177][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 14:06:28][350832440555177][308 ms][DEBUG] START check_boot_completed [2025-08-23 14:06:28][350832440555177][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:06:28][350832440555177][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:06:28][350832440555177][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:06:28][350832440555177][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:06:28][350832440555177][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:06:28][350832440555177][402 ms][DEBUG] START check_internet [2025-08-23 14:06:28][350832440555177][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:06:29][350832440555177][745 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.537/237.537/237.537/0.000 ms\n [2025-08-23 14:06:29][350832440555177][746 ms][DEBUG] check_internet: online [2025-08-23 14:06:29][350832440555177][746 ms][DEBUG] END check_internet in 344 ms [2025-08-23 14:06:29][350832440555177][746 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:06:29][350832440555177][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440555177\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6595\"}'\'' -e'"" [2025-08-23 14:06:29][350832440555177][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:06:29][350832440555177][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440555177\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6595\"}'\'' -e'"" [2025-08-23 14:06:32][350832440555177][4432 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 14:06:32][350832440555177][4432 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-23 14:06:32][350832440555177][4432 ms][WARN] Detected error: Process with pid 1228 either refused to load frida-agent, or terminated during injection [2025-08-23 14:06:32][350832440555177][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:06:32][350832440555177][4588 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 14:06:32][350832440555177][4588 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:06:32][350832440555177][4588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:06:33][350832440555177][4713 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 14:06:33][350832440555177][4713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:06:33][350832440555177][4869 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:06:35][350832440555177][6884 ms][DEBUG] START check_boot_completed [2025-08-23 14:06:35][350832440555177][6884 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:06:35][350832440555177][6931 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:06:35][350832440555177][6931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:06:35][350832440555177][6978 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:06:35][350832440555177][6978 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:06:38][350832440555177][9993 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:06:38][350832440555177][9993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440555177\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6595\"}'\'' -e'"" [2025-08-23 14:06:42][350832440555177][13961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38577599-7165-4753-80b5-18bf41106456","id":"QR_38577599-7165-4753-80b5-18bf41106456","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:06:42][350832440555177][14117 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-23 14:06:42][350832440555177][14117 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-23 14:06:42][350832440555177][14117 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:07:03][352485222869031][0 ms][INFO] === Request start === [2025-08-23 14:07:03][352485222869031][1 ms][DEBUG] START check_scloud [2025-08-23 14:07:03][352485222869031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:07:03][352485222869031][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 2547 19068 23712572 126236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:07:03][352485222869031][317 ms][DEBUG] targetPkg: running [2025-08-23 14:07:03][352485222869031][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 14:07:03][352485222869031][317 ms][DEBUG] START check_boot_completed [2025-08-23 14:07:03][352485222869031][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:07:03][352485222869031][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:07:03][352485222869031][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:07:03][352485222869031][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:07:03][352485222869031][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:07:03][352485222869031][410 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:07:03][352485222869031][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222869031\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2841\"}'\'' -e'"" [2025-08-23 14:07:03][352485222869031][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:07:03][352485222869031][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222869031\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2841\"}'\'' -e'"" [2025-08-23 14:07:07][352485222869031][4206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a36737f-788b-4258-b0c5-0ae7fdf28f70","id":"QR_1a36737f-788b-4258-b0c5-0ae7fdf28f70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:07:07][352485222869031][4362 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-23 14:07:07][352485222869031][4362 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 14:07:07][352485222869031][4363 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:07:10][351364030801828][0 ms][INFO] === Request start === [2025-08-23 14:07:10][351364030801828][1 ms][DEBUG] START check_scloud [2025-08-23 14:07:10][351364030801828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:07:10][351364030801828][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 2547 19068 23824780 137108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:07:10][351364030801828][283 ms][DEBUG] targetPkg: running [2025-08-23 14:07:10][351364030801828][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-23 14:07:10][351364030801828][284 ms][DEBUG] START check_boot_completed [2025-08-23 14:07:10][351364030801828][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:07:10][351364030801828][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:07:10][351364030801828][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:07:10][351364030801828][379 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 14:07:10][351364030801828][379 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:07:10][351364030801828][379 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:07:10][351364030801828][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364030801828\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-08-23 14:07:10][351364030801828][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:07:10][351364030801828][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364030801828\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-08-23 14:07:14][351364030801828][4157 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50864334-dce1-4165-9ffb-008e4a0fbe67","id":"QR_50864334-dce1-4165-9ffb-008e4a0fbe67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:07:14][351364030801828][4313 ms][DEBUG] proc_open done in 3934 ms; code=255; res.len=3343 [2025-08-23 14:07:14][351364030801828][4313 ms][DEBUG] END runCmdUntilRes#1 in 3934 ms [2025-08-23 14:07:14][351364030801828][4314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:07:17][350178734559552][1 ms][INFO] === Request start === [2025-08-23 14:07:17][350178734559552][1 ms][DEBUG] START check_scloud [2025-08-23 14:07:17][350178734559552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:07:17][350178734559552][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 2547 19068 23985748 148792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:07:17][350178734559552][312 ms][DEBUG] targetPkg: running [2025-08-23 14:07:17][350178734559552][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 14:07:17][350178734559552][313 ms][DEBUG] START check_boot_completed [2025-08-23 14:07:17][350178734559552][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:07:17][350178734559552][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:07:17][350178734559552][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:07:17][350178734559552][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:07:17][350178734559552][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:07:17][350178734559552][406 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:07:17][350178734559552][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734559552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-08-23 14:07:17][350178734559552][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:07:17][350178734559552][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734559552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-08-23 14:07:21][350178734559552][4108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c766372-aebd-4faf-a8fd-9ee12eeb2589","id":"QR_2c766372-aebd-4faf-a8fd-9ee12eeb2589","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:07:21][350178734559552][4264 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 14:07:21][350178734559552][4264 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-08-23 14:07:21][350178734559552][4265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:09:02][352773711760161][0 ms][INFO] === Request start === [2025-08-23 14:09:02][352773711760161][1 ms][DEBUG] START check_scloud [2025-08-23 14:09:02][352773711760161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:09:02][352773711760161][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 2547 19068 24038884 159756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:09:02][352773711760161][319 ms][DEBUG] targetPkg: running [2025-08-23 14:09:02][352773711760161][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 14:09:02][352773711760161][319 ms][DEBUG] START check_boot_completed [2025-08-23 14:09:02][352773711760161][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:09:02][352773711760161][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:09:02][352773711760161][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:09:02][352773711760161][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:09:02][352773711760161][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:09:02][352773711760161][428 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:09:02][352773711760161][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711760161\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3471\"}'\'' -e'"" [2025-08-23 14:09:02][352773711760161][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:09:02][352773711760161][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711760161\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3471\"}'\'' -e'"" [2025-08-23 14:09:06][352773711760161][4537 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd6fcd2c-5083-490c-9148-8d9b93117ab9","id":"QR_cd6fcd2c-5083-490c-9148-8d9b93117ab9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:09:07][352773711760161][4693 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 14:09:07][352773711760161][4693 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 14:09:07][352773711760161][4693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:10:03][357651716124523][1 ms][INFO] === Request start === [2025-08-23 14:10:03][357651716124523][1 ms][DEBUG] START check_scloud [2025-08-23 14:10:03][357651716124523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:10:03][357651716124523][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 2547 19068 24195784 171876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:10:03][357651716124523][267 ms][DEBUG] targetPkg: running [2025-08-23 14:10:03][357651716124523][268 ms][DEBUG] END check_scloud in 266 ms [2025-08-23 14:10:03][357651716124523][268 ms][DEBUG] START check_boot_completed [2025-08-23 14:10:03][357651716124523][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:10:03][357651716124523][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:10:03][357651716124523][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:10:04][357651716124523][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:10:04][357651716124523][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:10:04][357651716124523][361 ms][DEBUG] START check_internet [2025-08-23 14:10:04][357651716124523][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:10:04][357651716124523][876 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.538/200.538/200.538/0.000 ms\n [2025-08-23 14:10:04][357651716124523][877 ms][DEBUG] check_internet: online [2025-08-23 14:10:04][357651716124523][877 ms][DEBUG] END check_internet in 516 ms [2025-08-23 14:10:04][357651716124523][877 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:10:04][357651716124523][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716124523\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3535\"}'\'' -e'"" [2025-08-23 14:10:04][357651716124523][877 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:10:04][357651716124523][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716124523\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3535\"}'\'' -e'"" [2025-08-23 14:10:08][357651716124523][4985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d51d3af9-c8e3-42fb-a1f9-5c68dce2be6f","id":"QR_d51d3af9-c8e3-42fb-a1f9-5c68dce2be6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:10:08][357651716124523][5141 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 14:10:08][357651716124523][5141 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 14:10:08][357651716124523][5141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:10:12][351864713718041][0 ms][INFO] === Request start === [2025-08-23 14:10:12][351864713718041][1 ms][DEBUG] START check_scloud [2025-08-23 14:10:12][351864713718041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:10:12][351864713718041][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 2547 19068 24373136 182712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:10:12][351864713718041][268 ms][DEBUG] targetPkg: running [2025-08-23 14:10:12][351864713718041][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 14:10:12][351864713718041][268 ms][DEBUG] START check_boot_completed [2025-08-23 14:10:12][351864713718041][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:10:12][351864713718041][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:10:12][351864713718041][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:10:12][351864713718041][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:10:12][351864713718041][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:10:12][351864713718041][361 ms][DEBUG] START check_internet [2025-08-23 14:10:12][351864713718041][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.328/219.328/219.328/0.000 ms\n [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] check_internet: online [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] END check_internet in 312 ms [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:10:13][351864713718041][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3860\"}'\'' -e'"" [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:10:13][351864713718041][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3860\"}'\'' -e'"" [2025-08-23 14:10:17][351864713718041][5219 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 14:10:17][351864713718041][5376 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=101 [2025-08-23 14:10:17][351864713718041][5376 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-23 14:10:17][351864713718041][5376 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 14:10:18][][0 ms][INFO] === Request start === [2025-08-23 14:10:18][][1 ms][DEBUG] START check_scloud [2025-08-23 14:10:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:10:18][][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 2547 19068 24505368 194992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:10:18][][289 ms][DEBUG] targetPkg: running [2025-08-23 14:10:18][][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 14:10:18][][289 ms][DEBUG] START check_boot_completed [2025-08-23 14:10:18][][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:10:18][][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:10:18][][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:10:18][][384 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 14:10:18][][385 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:10:18][][385 ms][DEBUG] START check_internet [2025-08-23 14:10:18][][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:10:18][][664 ms][DEBUG] SU: done in 279 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.111/150.111/150.111/0.000 ms\n [2025-08-23 14:10:18][][664 ms][DEBUG] check_internet: online [2025-08-23 14:10:18][][664 ms][DEBUG] END check_internet in 280 ms [2025-08-23 14:10:18][][664 ms][DEBUG] rawBody.length=1130 [2025-08-23 14:10:18][][664 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20QGFDL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3037\"}'\'' -e'"" [2025-08-23 14:10:18][][664 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:10:18][][664 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20QGFDL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3037\"}'\'' -e'"" [2025-08-23 14:10:24][][6803 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 14:10:25][][6959 ms][DEBUG] proc_open done in 6294 ms; code=255; res.len=101 [2025-08-23 14:10:25][][6959 ms][DEBUG] END runCmdUntilRes#1 in 6295 ms [2025-08-23 14:10:25][][6959 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 14:11:03][350832442346914][0 ms][INFO] === Request start === [2025-08-23 14:11:03][350832442346914][1 ms][DEBUG] START check_scloud [2025-08-23 14:11:03][350832442346914][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:11:03][350832442346914][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 2547 19068 24590388 206328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:11:03][350832442346914][320 ms][DEBUG] targetPkg: running [2025-08-23 14:11:03][350832442346914][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 14:11:03][350832442346914][320 ms][DEBUG] START check_boot_completed [2025-08-23 14:11:03][350832442346914][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:11:03][350832442346914][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:11:03][350832442346914][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:11:03][350832442346914][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:11:03][350832442346914][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:11:03][350832442346914][414 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:11:03][350832442346914][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442346914\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-08-23 14:11:03][350832442346914][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:11:03][350832442346914][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442346914\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-08-23 14:11:07][350832442346914][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f22c2665-8cf7-4ef8-b6c1-8e11d5ca72e9","id":"QR_f22c2665-8cf7-4ef8-b6c1-8e11d5ca72e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:11:07][350832442346914][4647 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 14:11:07][350832442346914][4647 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 14:11:07][350832442346914][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:12:03][351234166157560][1 ms][INFO] === Request start === [2025-08-23 14:12:03][351234166157560][1 ms][DEBUG] START check_scloud [2025-08-23 14:12:03][351234166157560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:12:03][351234166157560][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 2547 19068 24714520 217696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:12:03][351234166157560][315 ms][DEBUG] targetPkg: running [2025-08-23 14:12:03][351234166157560][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 14:12:03][351234166157560][315 ms][DEBUG] START check_boot_completed [2025-08-23 14:12:03][351234166157560][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:12:03][351234166157560][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:12:03][351234166157560][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:12:03][351234166157560][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:12:03][351234166157560][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:12:03][351234166157560][410 ms][DEBUG] START check_internet [2025-08-23 14:12:03][351234166157560][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:12:04][351234166157560][674 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.190/160.190/160.190/0.000 ms\n [2025-08-23 14:12:04][351234166157560][675 ms][DEBUG] check_internet: online [2025-08-23 14:12:04][351234166157560][675 ms][DEBUG] END check_internet in 265 ms [2025-08-23 14:12:04][351234166157560][675 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:12:04][351234166157560][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166157560\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4528\"}'\'' -e'"" [2025-08-23 14:12:04][351234166157560][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:12:04][351234166157560][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166157560\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4528\"}'\'' -e'"" [2025-08-23 14:12:08][351234166157560][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b241479b-c94b-4b7d-887f-d95dc268370c","id":"QR_b241479b-c94b-4b7d-887f-d95dc268370c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:12:08][351234166157560][4689 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-23 14:12:08][351234166157560][4689 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 14:12:08][351234166157560][4689 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:13:02][352469852903955][1 ms][INFO] === Request start === [2025-08-23 14:13:02][352469852903955][1 ms][DEBUG] START check_scloud [2025-08-23 14:13:02][352469852903955][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:13:03][352469852903955][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 2547 19068 24838584 223100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:13:03][352469852903955][263 ms][DEBUG] targetPkg: running [2025-08-23 14:13:03][352469852903955][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 14:13:03][352469852903955][263 ms][DEBUG] START check_boot_completed [2025-08-23 14:13:03][352469852903955][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:13:03][352469852903955][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:13:03][352469852903955][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:13:03][352469852903955][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:13:03][352469852903955][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:13:03][352469852903955][372 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:13:03][352469852903955][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469852903955\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-08-23 14:13:03][352469852903955][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:13:03][352469852903955][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469852903955\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-08-23 14:13:07][352469852903955][4527 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_891f26c3-5003-4c19-a609-74a9117b95f3","id":"QR_891f26c3-5003-4c19-a609-74a9117b95f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:13:07][352469852903955][4683 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 14:13:07][352469852903955][4683 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 14:13:07][352469852903955][4683 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:18:04][351771922943478][1 ms][INFO] === Request start === [2025-08-23 14:18:04][351771922943478][1 ms][DEBUG] START check_scloud [2025-08-23 14:18:04][351771922943478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:18:04][351771922943478][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 2547 19068 24948380 235148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:18:04][351771922943478][314 ms][DEBUG] targetPkg: running [2025-08-23 14:18:04][351771922943478][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 14:18:04][351771922943478][314 ms][DEBUG] START check_boot_completed [2025-08-23 14:18:04][351771922943478][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:18:04][351771922943478][376 ms][DEBUG] ADB: done in 62 ms; out [2025-08-23 14:18:04][351771922943478][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:18:04][351771922943478][438 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 14:18:04][351771922943478][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 14:18:04][351771922943478][439 ms][DEBUG] START check_internet [2025-08-23 14:18:04][351771922943478][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.406/203.406/203.406/0.000 ms\n [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] check_internet: online [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] END check_internet in 469 ms [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:18:05][351771922943478][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922943478\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6336\"}'\'' -e'"" [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:18:05][351771922943478][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922943478\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6336\"}'\'' -e'"" [2025-08-23 14:18:08][351771922943478][4687 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 14:18:08][351771922943478][4688 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-23 14:18:08][351771922943478][4688 ms][WARN] Detected error: Process with pid 2547 either refused to load frida-agent, or terminated during injection [2025-08-23 14:18:08][351771922943478][4688 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:18:08][351771922943478][4844 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 14:18:08][351771922943478][4844 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:18:08][351771922943478][4844 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:18:09][351771922943478][4969 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 14:18:09][351771922943478][4969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:18:09][351771922943478][5141 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:18:11][351771922943478][7155 ms][DEBUG] START check_boot_completed [2025-08-23 14:18:11][351771922943478][7156 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:18:11][351771922943478][7202 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:18:11][351771922943478][7202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:18:11][351771922943478][7250 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:18:11][351771922943478][7250 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:18:14][351771922943478][10264 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:18:14][351771922943478][10264 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922943478\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6336\"}'\'' -e'"" [2025-08-23 14:18:18][351771922943478][14294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8fbc463-440f-4827-b7af-a69057c059c0","id":"QR_c8fbc463-440f-4827-b7af-a69057c059c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:18:18][351771922943478][14451 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 14:18:18][351771922943478][14451 ms][DEBUG] END runCmdUntilRes#2 in 4187 ms [2025-08-23 14:18:18][351771922943478][14451 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:18:21][354411849274361][1 ms][INFO] === Request start === [2025-08-23 14:18:21][354411849274361][1 ms][DEBUG] START check_scloud [2025-08-23 14:18:21][354411849274361][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:18:21][354411849274361][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 4891 19068 23684636 124080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:18:21][354411849274361][272 ms][DEBUG] targetPkg: running [2025-08-23 14:18:21][354411849274361][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-23 14:18:21][354411849274361][272 ms][DEBUG] START check_boot_completed [2025-08-23 14:18:21][354411849274361][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:18:21][354411849274361][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:18:21][354411849274361][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:18:21][354411849274361][368 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 14:18:21][354411849274361][368 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:18:21][354411849274361][368 ms][DEBUG] START check_internet [2025-08-23 14:18:21][354411849274361][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:18:21][354411849274361][709 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.762/238.762/238.762/0.000 ms\n [2025-08-23 14:18:21][354411849274361][710 ms][DEBUG] check_internet: online [2025-08-23 14:18:21][354411849274361][710 ms][DEBUG] END check_internet in 342 ms [2025-08-23 14:18:21][354411849274361][710 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:18:21][354411849274361][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411849274361\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1848\"}'\'' -e'"" [2025-08-23 14:18:21][354411849274361][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:18:21][354411849274361][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411849274361\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1848\"}'\'' -e'"" [2025-08-23 14:18:25][354411849274361][4365 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0620e1f3-3c5e-48df-bf8b-e4f5fe3d13f1","id":"QR_0620e1f3-3c5e-48df-bf8b-e4f5fe3d13f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:18:25][354411849274361][4521 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-23 14:18:25][354411849274361][4521 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 14:18:25][354411849274361][4521 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:19:03][350987614429490][0 ms][INFO] === Request start === [2025-08-23 14:19:03][350987614429490][1 ms][DEBUG] START check_scloud [2025-08-23 14:19:03][350987614429490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:19:03][350987614429490][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 4891 19068 23780728 137564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:19:03][350987614429490][317 ms][DEBUG] targetPkg: running [2025-08-23 14:19:03][350987614429490][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 14:19:03][350987614429490][317 ms][DEBUG] START check_boot_completed [2025-08-23 14:19:03][350987614429490][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:19:03][350987614429490][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:19:03][350987614429490][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:19:03][350987614429490][427 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 14:19:03][350987614429490][427 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 14:19:03][350987614429490][427 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:19:03][350987614429490][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987614429490\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8874\"}'\'' -e'"" [2025-08-23 14:19:03][350987614429490][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:19:03][350987614429490][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987614429490\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8874\"}'\'' -e'"" [2025-08-23 14:19:07][350987614429490][4347 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7deb04b-d690-4431-beed-d7601e5bec06","id":"QR_c7deb04b-d690-4431-beed-d7601e5bec06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:19:07][350987614429490][4503 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-23 14:19:07][350987614429490][4503 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-23 14:19:07][350987614429490][4503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:20:03][352053266914301][0 ms][INFO] === Request start === [2025-08-23 14:20:03][352053266914301][1 ms][DEBUG] START check_scloud [2025-08-23 14:20:03][352053266914301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:20:03][352053266914301][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4891 19068 23927196 148844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:20:03][352053266914301][312 ms][DEBUG] targetPkg: running [2025-08-23 14:20:03][352053266914301][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 14:20:03][352053266914301][312 ms][DEBUG] START check_boot_completed [2025-08-23 14:20:03][352053266914301][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:20:03][352053266914301][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:20:03][352053266914301][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:20:04][352053266914301][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:20:04][352053266914301][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:20:04][352053266914301][421 ms][DEBUG] START check_internet [2025-08-23 14:20:04][352053266914301][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:20:04][352053266914301][921 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.222/202.222/202.222/0.000 ms\n [2025-08-23 14:20:04][352053266914301][921 ms][DEBUG] check_internet: online [2025-08-23 14:20:04][352053266914301][921 ms][DEBUG] END check_internet in 500 ms [2025-08-23 14:20:04][352053266914301][921 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:20:04][352053266914301][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266914301\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-08-23 14:20:04][352053266914301][921 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:20:04][352053266914301][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053266914301\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-08-23 14:20:08][352053266914301][4936 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b62e1b9e-b8e2-4b86-8f93-1a04bae364c0","id":"QR_b62e1b9e-b8e2-4b86-8f93-1a04bae364c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:20:08][352053266914301][5092 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 14:20:08][352053266914301][5092 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 14:20:08][352053266914301][5092 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:22:03][353129156261075][1 ms][INFO] === Request start === [2025-08-23 14:22:03][353129156261075][1 ms][DEBUG] START check_scloud [2025-08-23 14:22:03][353129156261075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:22:03][353129156261075][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 4891 19068 24042896 159968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:22:03][353129156261075][259 ms][DEBUG] targetPkg: running [2025-08-23 14:22:03][353129156261075][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-23 14:22:03][353129156261075][259 ms][DEBUG] START check_boot_completed [2025-08-23 14:22:03][353129156261075][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:22:03][353129156261075][304 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 14:22:03][353129156261075][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:22:03][353129156261075][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:22:03][353129156261075][351 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 14:22:03][353129156261075][351 ms][DEBUG] START check_internet [2025-08-23 14:22:03][353129156261075][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.910/191.910/191.910/0.000 ms\n [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] check_internet: online [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] END check_internet in 330 ms [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:22:03][353129156261075][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129156261075\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5078\"}'\'' -e'"" [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:22:03][353129156261075][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129156261075\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5078\"}'\'' -e'"" [2025-08-23 14:22:08][353129156261075][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce2d33a1-0535-483d-9746-90aa81dd41a6","id":"QR_ce2d33a1-0535-483d-9746-90aa81dd41a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:22:08][353129156261075][4943 ms][DEBUG] proc_open done in 4262 ms; code=255; res.len=3343 [2025-08-23 14:22:08][353129156261075][4943 ms][DEBUG] END runCmdUntilRes#1 in 4262 ms [2025-08-23 14:22:08][353129156261075][4943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:22:10][355857113640290][0 ms][INFO] === Request start === [2025-08-23 14:22:10][355857113640290][1 ms][DEBUG] START check_scloud [2025-08-23 14:22:10][355857113640290][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:22:11][355857113640290][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 4891 19068 24170968 170760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:22:11][355857113640290][321 ms][DEBUG] targetPkg: running [2025-08-23 14:22:11][355857113640290][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 14:22:11][355857113640290][321 ms][DEBUG] START check_boot_completed [2025-08-23 14:22:11][355857113640290][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:22:11][355857113640290][352 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:22:11][355857113640290][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:22:11][355857113640290][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:22:11][355857113640290][400 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 14:22:11][355857113640290][400 ms][DEBUG] START check_internet [2025-08-23 14:22:11][355857113640290][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.083/253.083/253.083/0.000 ms\n [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] check_internet: online [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] END check_internet in 359 ms [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:22:11][355857113640290][759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113640290\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3890\"}'\'' -e'"" [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:22:11][355857113640290][759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113640290\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3890\"}'\'' -e'"" [2025-08-23 14:22:15][355857113640290][4523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd2359ab-7b17-4e0c-94b2-ea95175ea85f","id":"QR_fd2359ab-7b17-4e0c-94b2-ea95175ea85f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:22:15][355857113640290][4680 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-23 14:22:15][355857113640290][4680 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-23 14:22:15][355857113640290][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:23:04][359706684176356][0 ms][INFO] === Request start === [2025-08-23 14:23:04][359706684176356][1 ms][DEBUG] START check_scloud [2025-08-23 14:23:04][359706684176356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:23:05][359706684176356][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 4891 19068 24276504 182900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:23:05][359706684176356][303 ms][DEBUG] targetPkg: running [2025-08-23 14:23:05][359706684176356][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 14:23:05][359706684176356][303 ms][DEBUG] START check_boot_completed [2025-08-23 14:23:05][359706684176356][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:23:05][359706684176356][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:23:05][359706684176356][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:23:05][359706684176356][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:23:05][359706684176356][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:23:05][359706684176356][398 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:23:05][359706684176356][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706684176356\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5983\"}'\'' -e'"" [2025-08-23 14:23:05][359706684176356][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:23:05][359706684176356][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706684176356\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5983\"}'\'' -e'"" [2025-08-23 14:23:10][359706684176356][5739 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59cd4a6e-a786-442c-8c87-8df0d4c4fe03","id":"QR_59cd4a6e-a786-442c-8c87-8df0d4c4fe03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:23:10][359706684176356][5895 ms][DEBUG] proc_open done in 5497 ms; code=255; res.len=3343 [2025-08-23 14:23:10][359706684176356][5895 ms][DEBUG] END runCmdUntilRes#1 in 5497 ms [2025-08-23 14:23:10][359706684176356][5895 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:26:02][355902955286834][1 ms][INFO] === Request start === [2025-08-23 14:26:02][355902955286834][1 ms][DEBUG] START check_scloud [2025-08-23 14:26:02][355902955286834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:26:03][355902955286834][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 4891 19068 24405656 194072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:26:03][355902955286834][256 ms][DEBUG] targetPkg: running [2025-08-23 14:26:03][355902955286834][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 14:26:03][355902955286834][256 ms][DEBUG] START check_boot_completed [2025-08-23 14:26:03][355902955286834][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:26:03][355902955286834][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:26:03][355902955286834][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:26:03][355902955286834][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:26:03][355902955286834][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:26:03][355902955286834][335 ms][DEBUG] START check_internet [2025-08-23 14:26:03][355902955286834][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:26:03][355902955286834][834 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.663/202.663/202.663/0.000 ms\n [2025-08-23 14:26:03][355902955286834][835 ms][DEBUG] check_internet: online [2025-08-23 14:26:03][355902955286834][835 ms][DEBUG] END check_internet in 500 ms [2025-08-23 14:26:03][355902955286834][835 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:26:03][355902955286834][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902955286834\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-23 14:26:03][355902955286834][835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:26:03][355902955286834][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355902955286834\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-23 14:26:07][355902955286834][4740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50079b55-d77d-4ead-8744-a1c3cd4b6107","id":"QR_50079b55-d77d-4ead-8744-a1c3cd4b6107","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:26:07][355902955286834][4896 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-23 14:26:07][355902955286834][4896 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-23 14:26:07][355902955286834][4896 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:31:05][354173242832134][1 ms][INFO] === Request start === [2025-08-23 14:31:05][354173242832134][1 ms][DEBUG] START check_scloud [2025-08-23 14:31:05][354173242832134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:31:05][354173242832134][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 4891 19068 24546172 206208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:31:05][354173242832134][287 ms][DEBUG] targetPkg: running [2025-08-23 14:31:05][354173242832134][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-23 14:31:05][354173242832134][287 ms][DEBUG] START check_boot_completed [2025-08-23 14:31:05][354173242832134][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:31:05][354173242832134][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:31:05][354173242832134][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:31:05][354173242832134][412 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 14:31:05][354173242832134][412 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 14:31:05][354173242832134][412 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:31:05][354173242832134][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173242832134\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-23 14:31:05][354173242832134][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:31:05][354173242832134][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173242832134\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-23 14:31:10][354173242832134][5692 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f20f24f-30db-4bdc-ab83-c46b004272cc","id":"QR_9f20f24f-30db-4bdc-ab83-c46b004272cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:31:11][354173242832134][5848 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-08-23 14:31:11][354173242832134][5848 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-23 14:31:11][354173242832134][5848 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:31:15][350900922546830][1 ms][INFO] === Request start === [2025-08-23 14:31:15][350900922546830][1 ms][DEBUG] START check_scloud [2025-08-23 14:31:15][350900922546830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:31:15][350900922546830][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 4891 19068 24721540 217100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:31:15][350900922546830][246 ms][DEBUG] targetPkg: running [2025-08-23 14:31:15][350900922546830][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-23 14:31:15][350900922546830][246 ms][DEBUG] START check_boot_completed [2025-08-23 14:31:15][350900922546830][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:31:15][350900922546830][291 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 14:31:15][350900922546830][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:31:15][350900922546830][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:31:15][350900922546830][338 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 14:31:15][350900922546830][338 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:31:15][350900922546830][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922546830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2239\"}'\'' -e'"" [2025-08-23 14:31:15][350900922546830][338 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:31:15][350900922546830][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922546830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2239\"}'\'' -e'"" [2025-08-23 14:31:20][350900922546830][4493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_107ddcf5-9458-4a8b-8698-82259c7a2269","id":"QR_107ddcf5-9458-4a8b-8698-82259c7a2269","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:31:20][350900922546830][4650 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 14:31:20][350900922546830][4650 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 14:31:20][350900922546830][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:33:04][350239331829184][0 ms][INFO] === Request start === [2025-08-23 14:33:04][350239331829184][1 ms][DEBUG] START check_scloud [2025-08-23 14:33:04][350239331829184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:33:05][350239331829184][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 4891 19068 24827208 229908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:33:05][350239331829184][315 ms][DEBUG] targetPkg: running [2025-08-23 14:33:05][350239331829184][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 14:33:05][350239331829184][315 ms][DEBUG] START check_boot_completed [2025-08-23 14:33:05][350239331829184][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:33:05][350239331829184][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:33:05][350239331829184][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:33:05][350239331829184][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:33:05][350239331829184][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:33:05][350239331829184][409 ms][DEBUG] rawBody.length=1158 [2025-08-23 14:33:05][350239331829184][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239331829184\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T30F2J3X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6468\"}'\'' -e'"" [2025-08-23 14:33:05][350239331829184][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:33:05][350239331829184][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239331829184\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T30F2J3X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6468\"}'\'' -e'"" [2025-08-23 14:33:09][350239331829184][4423 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8d5341f-03a2-4bce-9e54-ea747159e4e3","id":"QR_e8d5341f-03a2-4bce-9e54-ea747159e4e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:33:09][350239331829184][4579 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 14:33:09][350239331829184][4579 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 14:33:09][350239331829184][4579 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:34:03][352600229373718][1 ms][INFO] === Request start === [2025-08-23 14:34:03][352600229373718][1 ms][DEBUG] START check_scloud [2025-08-23 14:34:03][352600229373718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:34:03][352600229373718][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 4891 19068 24982060 240856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:34:03][352600229373718][310 ms][DEBUG] targetPkg: running [2025-08-23 14:34:03][352600229373718][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 14:34:03][352600229373718][310 ms][DEBUG] START check_boot_completed [2025-08-23 14:34:03][352600229373718][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:34:03][352600229373718][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:34:03][352600229373718][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:34:03][352600229373718][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:34:03][352600229373718][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:34:03][352600229373718][405 ms][DEBUG] START check_internet [2025-08-23 14:34:03][352600229373718][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:34:04][352600229373718][856 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.049/200.049/200.049/0.000 ms\n [2025-08-23 14:34:04][352600229373718][856 ms][DEBUG] check_internet: online [2025-08-23 14:34:04][352600229373718][856 ms][DEBUG] END check_internet in 452 ms [2025-08-23 14:34:04][352600229373718][857 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:34:04][352600229373718][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229373718\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3801\"}'\'' -e'"" [2025-08-23 14:34:04][352600229373718][857 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:34:04][352600229373718][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229373718\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3801\"}'\'' -e'"" [2025-08-23 14:34:08][352600229373718][4605 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 14:34:08][352600229373718][4605 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-23 14:34:08][352600229373718][4605 ms][WARN] Detected error: Process with pid 4891 either refused to load frida-agent, or terminated during injection [2025-08-23 14:34:08][352600229373718][4605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:34:08][352600229373718][4730 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 14:34:08][352600229373718][4731 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:34:08][352600229373718][4731 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:34:08][352600229373718][4856 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 14:34:08][352600229373718][4856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:34:08][352600229373718][5059 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:34:10][352600229373718][7073 ms][DEBUG] START check_boot_completed [2025-08-23 14:34:10][352600229373718][7073 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:34:10][352600229373718][7120 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:34:10][352600229373718][7120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:34:10][352600229373718][7167 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:34:10][352600229373718][7167 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:34:13][352600229373718][10182 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:34:13][352600229373718][10182 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229373718\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3801\"}'\'' -e'"" [2025-08-23 14:34:17][352600229373718][14337 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0652e83c-3632-4758-bbaa-10bb4e99249f","id":"QR_0652e83c-3632-4758-bbaa-10bb4e99249f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:34:18][352600229373718][14493 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 14:34:18][352600229373718][14494 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-23 14:34:18][352600229373718][14494 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:35:03][359484881219383][0 ms][INFO] === Request start === [2025-08-23 14:35:03][359484881219383][1 ms][DEBUG] START check_scloud [2025-08-23 14:35:03][359484881219383][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:35:04][359484881219383][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 6526 19068 23600304 126532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:35:04][359484881219383][357 ms][DEBUG] targetPkg: running [2025-08-23 14:35:04][359484881219383][357 ms][DEBUG] END check_scloud in 357 ms [2025-08-23 14:35:04][359484881219383][357 ms][DEBUG] START check_boot_completed [2025-08-23 14:35:04][359484881219383][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:35:04][359484881219383][404 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:35:04][359484881219383][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:35:04][359484881219383][466 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:35:04][359484881219383][466 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:35:04][359484881219383][467 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:35:04][359484881219383][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484881219383\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7459\"}'\'' -e'"" [2025-08-23 14:35:04][359484881219383][467 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:35:04][359484881219383][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484881219383\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7459\"}'\'' -e'"" [2025-08-23 14:35:08][359484881219383][4372 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f1bf122-4729-4f8e-bd10-a7d4e50b4eb8","id":"QR_7f1bf122-4729-4f8e-bd10-a7d4e50b4eb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:35:08][359484881219383][4528 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-23 14:35:08][359484881219383][4528 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-23 14:35:08][359484881219383][4528 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:36:04][358261910350434][1 ms][INFO] === Request start === [2025-08-23 14:36:04][358261910350434][1 ms][DEBUG] START check_scloud [2025-08-23 14:36:04][358261910350434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:36:04][358261910350434][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 6526 19068 23716052 131432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:36:04][358261910350434][269 ms][DEBUG] targetPkg: running [2025-08-23 14:36:04][358261910350434][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 14:36:04][358261910350434][269 ms][DEBUG] START check_boot_completed [2025-08-23 14:36:04][358261910350434][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:36:04][358261910350434][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:36:04][358261910350434][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:36:04][358261910350434][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:36:04][358261910350434][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:36:04][358261910350434][363 ms][DEBUG] START check_internet [2025-08-23 14:36:04][358261910350434][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:36:05][358261910350434][706 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.792/222.792/222.792/0.000 ms\n [2025-08-23 14:36:05][358261910350434][706 ms][DEBUG] check_internet: online [2025-08-23 14:36:05][358261910350434][706 ms][DEBUG] END check_internet in 344 ms [2025-08-23 14:36:05][358261910350434][706 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:36:05][358261910350434][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261910350434\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1971\"}'\'' -e'"" [2025-08-23 14:36:05][358261910350434][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:36:05][358261910350434][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261910350434\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1971\"}'\'' -e'"" [2025-08-23 14:36:09][358261910350434][4768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c357df5a-e12a-4551-afd2-66b50604b247","id":"QR_c357df5a-e12a-4551-afd2-66b50604b247","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:36:09][358261910350434][4924 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-23 14:36:09][358261910350434][4924 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-23 14:36:09][358261910350434][4924 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:36:10][354484221767104][0 ms][INFO] === Request start === [2025-08-23 14:36:10][354484221767104][0 ms][DEBUG] START check_scloud [2025-08-23 14:36:10][354484221767104][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:36:11][354484221767104][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 6526 19068 23826704 135604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:36:11][354484221767104][306 ms][DEBUG] targetPkg: running [2025-08-23 14:36:11][354484221767104][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 14:36:11][354484221767104][306 ms][DEBUG] START check_boot_completed [2025-08-23 14:36:11][354484221767104][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:36:11][354484221767104][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:36:11][354484221767104][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:36:11][354484221767104][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:36:11][354484221767104][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:36:11][354484221767104][415 ms][DEBUG] START check_internet [2025-08-23 14:36:11][354484221767104][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.836/135.836/135.836/0.000 ms\n [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] check_internet: online [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] END check_internet in 250 ms [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:36:11][354484221767104][665 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5339\"}'\'' -e'"" [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:36:11][354484221767104][665 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5339\"}'\'' -e'"" [2025-08-23 14:36:15][354484221767104][4164 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 14:36:15][354484221767104][4320 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=115 [2025-08-23 14:36:15][354484221767104][4320 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 14:36:15][354484221767104][4321 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 14:36:15][][0 ms][INFO] === Request start === [2025-08-23 14:36:15][][1 ms][DEBUG] START check_scloud [2025-08-23 14:36:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:36:15][][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 6526 19068 23959000 146624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:36:15][][309 ms][DEBUG] targetPkg: running [2025-08-23 14:36:15][][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 14:36:15][][309 ms][DEBUG] START check_boot_completed [2025-08-23 14:36:15][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:36:15][][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:36:15][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:36:16][][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:36:16][][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:36:16][][388 ms][DEBUG] START check_internet [2025-08-23 14:36:16][][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:36:16][][653 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.692/140.692/140.692/0.000 ms\n [2025-08-23 14:36:16][][653 ms][DEBUG] check_internet: online [2025-08-23 14:36:16][][653 ms][DEBUG] END check_internet in 265 ms [2025-08-23 14:36:16][][653 ms][DEBUG] rawBody.length=1129 [2025-08-23 14:36:16][][653 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10WXMEW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1347\"}'\'' -e'"" [2025-08-23 14:36:16][][653 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:36:16][][653 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10WXMEW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1347\"}'\'' -e'"" [2025-08-23 14:36:19][][4183 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 14:36:19][][4340 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=107 [2025-08-23 14:36:19][][4340 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-23 14:36:19][][4340 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 14:37:04][352042192174163][0 ms][INFO] === Request start === [2025-08-23 14:37:04][352042192174163][1 ms][DEBUG] START check_scloud [2025-08-23 14:37:04][352042192174163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:37:05][352042192174163][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 6526 19068 24054132 158608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:37:05][352042192174163][317 ms][DEBUG] targetPkg: running [2025-08-23 14:37:05][352042192174163][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 14:37:05][352042192174163][317 ms][DEBUG] START check_boot_completed [2025-08-23 14:37:05][352042192174163][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:37:05][352042192174163][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:37:05][352042192174163][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:37:05][352042192174163][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:37:05][352042192174163][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:37:05][352042192174163][411 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:37:05][352042192174163][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042192174163\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1250\"}'\'' -e'"" [2025-08-23 14:37:05][352042192174163][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:37:05][352042192174163][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042192174163\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1250\"}'\'' -e'"" [2025-08-23 14:37:10][352042192174163][5722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_130471fc-b805-4284-9c76-b83db64a9f03","id":"QR_130471fc-b805-4284-9c76-b83db64a9f03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:37:10][352042192174163][5878 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-23 14:37:10][352042192174163][5878 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-23 14:37:10][352042192174163][5878 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:37:15][350386304818148][0 ms][INFO] === Request start === [2025-08-23 14:37:15][350386304818148][1 ms][DEBUG] START check_scloud [2025-08-23 14:37:15][350386304818148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:37:15][350386304818148][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 6526 19068 24219196 169476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:37:15][350386304818148][320 ms][DEBUG] targetPkg: running [2025-08-23 14:37:15][350386304818148][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 14:37:15][350386304818148][320 ms][DEBUG] START check_boot_completed [2025-08-23 14:37:15][350386304818148][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:37:15][350386304818148][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:37:15][350386304818148][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:37:16][350386304818148][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:37:16][350386304818148][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:37:16][350386304818148][398 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:37:16][350386304818148][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304818148\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2263\"}'\'' -e'"" [2025-08-23 14:37:16][350386304818148][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:37:16][350386304818148][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304818148\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2263\"}'\'' -e'"" [2025-08-23 14:37:20][350386304818148][4600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6644e41a-118e-4e0a-80c3-84786755f507","id":"QR_6644e41a-118e-4e0a-80c3-84786755f507","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:37:20][350386304818148][4757 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 14:37:20][350386304818148][4757 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 14:37:20][350386304818148][4757 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:37:22][350100350018721][0 ms][INFO] === Request start === [2025-08-23 14:37:22][350100350018721][1 ms][DEBUG] START check_scloud [2025-08-23 14:37:22][350100350018721][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:37:23][350100350018721][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 6526 19068 24380100 181136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:37:23][350100350018721][302 ms][DEBUG] targetPkg: running [2025-08-23 14:37:23][350100350018721][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 14:37:23][350100350018721][303 ms][DEBUG] START check_boot_completed [2025-08-23 14:37:23][350100350018721][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:37:23][350100350018721][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:37:23][350100350018721][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:37:23][350100350018721][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:37:23][350100350018721][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:37:23][350100350018721][381 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:37:23][350100350018721][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350018721\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9370\"}'\'' -e'"" [2025-08-23 14:37:23][350100350018721][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:37:23][350100350018721][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350018721\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9370\"}'\'' -e'"" [2025-08-23 14:37:27][350100350018721][4161 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3535f6f-5cce-4191-afa7-99d99550d2d4","id":"QR_c3535f6f-5cce-4191-afa7-99d99550d2d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:37:27][350100350018721][4317 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 14:37:27][350100350018721][4317 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 14:37:27][350100350018721][4317 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:39:03][352842935691617][1 ms][INFO] === Request start === [2025-08-23 14:39:03][352842935691617][1 ms][DEBUG] START check_scloud [2025-08-23 14:39:03][352842935691617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:39:04][352842935691617][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 6526 19068 24490876 191296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:39:04][352842935691617][322 ms][DEBUG] targetPkg: running [2025-08-23 14:39:04][352842935691617][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 14:39:04][352842935691617][322 ms][DEBUG] START check_boot_completed [2025-08-23 14:39:04][352842935691617][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:39:04][352842935691617][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:39:04][352842935691617][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:39:04][352842935691617][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:39:04][352842935691617][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:39:04][352842935691617][431 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:39:04][352842935691617][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935691617\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4588\"}'\'' -e'"" [2025-08-23 14:39:04][352842935691617][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:39:04][352842935691617][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935691617\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4588\"}'\'' -e'"" [2025-08-23 14:39:08][352842935691617][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84d6e888-1d96-4125-bdf1-e18730954412","id":"QR_84d6e888-1d96-4125-bdf1-e18730954412","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:39:08][352842935691617][4711 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 14:39:08][352842935691617][4711 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 14:39:08][352842935691617][4711 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:40:03][351104340192124][0 ms][INFO] === Request start === [2025-08-23 14:40:03][351104340192124][1 ms][DEBUG] START check_scloud [2025-08-23 14:40:03][351104340192124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:40:03][351104340192124][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 6526 19068 24641632 198024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:40:03][351104340192124][304 ms][DEBUG] targetPkg: running [2025-08-23 14:40:03][351104340192124][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 14:40:03][351104340192124][304 ms][DEBUG] START check_boot_completed [2025-08-23 14:40:03][351104340192124][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:40:04][351104340192124][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:40:04][351104340192124][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:40:04][351104340192124][444 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 14:40:04][351104340192124][444 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 14:40:04][351104340192124][444 ms][DEBUG] START check_internet [2025-08-23 14:40:04][351104340192124][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.468/202.468/202.468/0.000 ms\n [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] check_internet: online [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] END check_internet in 516 ms [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:40:04][351104340192124][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340192124\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:40:04][351104340192124][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340192124\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-23 14:40:08][351104340192124][5302 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f6b1779-c78a-42a3-98bc-67bda2c481c8","id":"QR_0f6b1779-c78a-42a3-98bc-67bda2c481c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:40:09][351104340192124][5458 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-23 14:40:09][351104340192124][5458 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-23 14:40:09][351104340192124][5458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:40:13][352429893810486][0 ms][INFO] === Request start === [2025-08-23 14:40:13][352429893810486][1 ms][DEBUG] START check_scloud [2025-08-23 14:40:13][352429893810486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:40:13][352429893810486][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 6526 19068 24808812 209912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:40:13][352429893810486][290 ms][DEBUG] targetPkg: running [2025-08-23 14:40:13][352429893810486][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 14:40:13][352429893810486][290 ms][DEBUG] START check_boot_completed [2025-08-23 14:40:13][352429893810486][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:40:13][352429893810486][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:40:13][352429893810486][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:40:13][352429893810486][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 14:40:13][352429893810486][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:40:13][352429893810486][399 ms][DEBUG] START check_internet [2025-08-23 14:40:13][352429893810486][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.046/246.046/246.046/0.000 ms\n [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] check_internet: online [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] END check_internet in 360 ms [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:40:14][352429893810486][759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429893810486\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:40:14][352429893810486][759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429893810486\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-08-23 14:40:24][352429893810486][10725 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7e607da-0e92-4429-87c0-f87f56d82a3c","id":"QR_f7e607da-0e92-4429-87c0-f87f56d82a3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:40:24][352429893810486][10881 ms][DEBUG] proc_open done in 10122 ms; code=255; res.len=3343 [2025-08-23 14:40:24][352429893810486][10881 ms][DEBUG] END runCmdUntilRes#1 in 10122 ms [2025-08-23 14:40:24][352429893810486][10881 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:41:03][358141433586054][0 ms][INFO] === Request start === [2025-08-23 14:41:03][358141433586054][1 ms][DEBUG] START check_scloud [2025-08-23 14:41:03][358141433586054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:41:04][358141433586054][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 6526 19068 24916524 222000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:41:04][358141433586054][300 ms][DEBUG] targetPkg: running [2025-08-23 14:41:04][358141433586054][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 14:41:04][358141433586054][300 ms][DEBUG] START check_boot_completed [2025-08-23 14:41:04][358141433586054][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:41:04][358141433586054][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:41:04][358141433586054][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:41:04][358141433586054][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:41:04][358141433586054][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:41:04][358141433586054][377 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:41:04][358141433586054][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433586054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9112\"}'\'' -e'"" [2025-08-23 14:41:04][358141433586054][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:41:04][358141433586054][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433586054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9112\"}'\'' -e'"" [2025-08-23 14:41:07][358141433586054][4064 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 14:41:07][358141433586054][4064 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-23 14:41:07][358141433586054][4064 ms][WARN] Detected error: Process with pid 6526 either refused to load frida-agent, or terminated during injection [2025-08-23 14:41:07][358141433586054][4064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:41:08][358141433586054][4189 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 14:41:08][358141433586054][4189 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:41:08][358141433586054][4189 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:41:08][358141433586054][4330 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 14:41:08][358141433586054][4330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:41:08][358141433586054][4502 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:41:10][358141433586054][6517 ms][DEBUG] START check_boot_completed [2025-08-23 14:41:10][358141433586054][6517 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:41:10][358141433586054][6564 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:41:10][358141433586054][6564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:41:10][358141433586054][6610 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:41:10][358141433586054][6610 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:41:13][358141433586054][9625 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:41:13][358141433586054][9625 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433586054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9112\"}'\'' -e'"" [2025-08-23 14:41:17][358141433586054][13546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6db2c31d-efe0-44e7-87ad-65b47913a23e","id":"QR_6db2c31d-efe0-44e7-87ad-65b47913a23e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:41:17][358141433586054][13702 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-23 14:41:17][358141433586054][13703 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-23 14:41:17][358141433586054][13703 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:41:20][352288963691899][1 ms][INFO] === Request start === [2025-08-23 14:41:20][352288963691899][1 ms][DEBUG] START check_scloud [2025-08-23 14:41:20][352288963691899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:41:20][352288963691899][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 8888 19068 23595516 123740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:41:20][352288963691899][276 ms][DEBUG] targetPkg: running [2025-08-23 14:41:20][352288963691899][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 14:41:20][352288963691899][276 ms][DEBUG] START check_boot_completed [2025-08-23 14:41:20][352288963691899][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:41:20][352288963691899][323 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:41:20][352288963691899][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:41:20][352288963691899][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:41:20][352288963691899][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:41:20][352288963691899][370 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:41:20][352288963691899][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963691899\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8159\"}'\'' -e'"" [2025-08-23 14:41:20][352288963691899][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:41:20][352288963691899][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963691899\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8159\"}'\'' -e'"" [2025-08-23 14:41:24][352288963691899][4400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdf0944b-1baf-4051-a2f9-7499b2e7d868","id":"QR_bdf0944b-1baf-4051-a2f9-7499b2e7d868","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:41:24][352288963691899][4556 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 14:41:24][352288963691899][4556 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 14:41:24][352288963691899][4556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:41:31][350287315541440][0 ms][INFO] === Request start === [2025-08-23 14:41:31][350287315541440][1 ms][DEBUG] START check_scloud [2025-08-23 14:41:31][350287315541440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:41:31][350287315541440][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 8888 19068 23780052 136960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:41:31][350287315541440][292 ms][DEBUG] targetPkg: running [2025-08-23 14:41:31][350287315541440][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 14:41:31][350287315541440][292 ms][DEBUG] START check_boot_completed [2025-08-23 14:41:31][350287315541440][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:41:31][350287315541440][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:41:31][350287315541440][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:41:31][350287315541440][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:41:31][350287315541440][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:41:31][350287315541440][386 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:41:31][350287315541440][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-08-23 14:41:31][350287315541440][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:41:31][350287315541440][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-08-23 14:41:35][350287315541440][3963 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 14:41:35][350287315541440][4119 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-23 14:41:35][350287315541440][4119 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-23 14:41:35][350287315541440][4119 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 14:41:35][][0 ms][INFO] === Request start === [2025-08-23 14:41:35][][1 ms][DEBUG] START check_scloud [2025-08-23 14:41:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:41:36][][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 8888 19068 23912184 148696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:41:36][][247 ms][DEBUG] targetPkg: running [2025-08-23 14:41:36][][247 ms][DEBUG] END check_scloud in 247 ms [2025-08-23 14:41:36][][247 ms][DEBUG] START check_boot_completed [2025-08-23 14:41:36][][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:41:36][][293 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 14:41:36][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:41:36][][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:41:36][][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:41:36][][340 ms][DEBUG] rawBody.length=1129 [2025-08-23 14:41:36][][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3729\"}'\'' -e'"" [2025-08-23 14:41:36][][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:41:36][][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3729\"}'\'' -e'"" [2025-08-23 14:41:39][][3714 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 14:41:39][][3870 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-23 14:41:39][][3870 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-23 14:41:39][][3870 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 14:42:04][352060489172989][0 ms][INFO] === Request start === [2025-08-23 14:42:04][352060489172989][1 ms][DEBUG] START check_scloud [2025-08-23 14:42:04][352060489172989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:42:04][352060489172989][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 8888 19068 23977600 160308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:42:04][352060489172989][316 ms][DEBUG] targetPkg: running [2025-08-23 14:42:04][352060489172989][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 14:42:04][352060489172989][317 ms][DEBUG] START check_boot_completed [2025-08-23 14:42:04][352060489172989][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:42:04][352060489172989][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:42:04][352060489172989][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:42:04][352060489172989][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:42:04][352060489172989][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:42:04][352060489172989][410 ms][DEBUG] START check_internet [2025-08-23 14:42:04][352060489172989][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.055/247.055/247.055/0.000 ms\n [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] check_internet: online [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] END check_internet in 344 ms [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:42:04][352060489172989][754 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060489172989\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4520\"}'\'' -e'"" [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:42:04][352060489172989][754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060489172989\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4520\"}'\'' -e'"" [2025-08-23 14:42:08][352060489172989][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_695e5003-c486-4ba5-9bb6-3faa87da9ce1","id":"QR_695e5003-c486-4ba5-9bb6-3faa87da9ce1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:42:09][352060489172989][5034 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-23 14:42:09][352060489172989][5034 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 14:42:09][352060489172989][5034 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:47:03][350616256016311][1 ms][INFO] === Request start === [2025-08-23 14:47:03][350616256016311][1 ms][DEBUG] START check_scloud [2025-08-23 14:47:03][350616256016311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:47:04][350616256016311][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 8888 19068 24099636 171516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:47:04][350616256016311][276 ms][DEBUG] targetPkg: running [2025-08-23 14:47:04][350616256016311][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 14:47:04][350616256016311][276 ms][DEBUG] START check_boot_completed [2025-08-23 14:47:04][350616256016311][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:47:04][350616256016311][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:47:04][350616256016311][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:47:04][350616256016311][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:47:04][350616256016311][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:47:04][350616256016311][355 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:47:04][350616256016311][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616256016311\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4158\"}'\'' -e'"" [2025-08-23 14:47:04][350616256016311][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:47:04][350616256016311][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616256016311\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4158\"}'\'' -e'"" [2025-08-23 14:47:08][350616256016311][4619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3def375-9402-4f86-9102-41164987ee50","id":"QR_c3def375-9402-4f86-9102-41164987ee50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:47:08][350616256016311][4775 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 14:47:08][350616256016311][4775 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 14:47:08][350616256016311][4775 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:48:03][351199558339557][0 ms][INFO] === Request start === [2025-08-23 14:48:03][351199558339557][1 ms][DEBUG] START check_scloud [2025-08-23 14:48:03][351199558339557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:48:04][351199558339557][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 8888 19068 24223768 183800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:48:04][351199558339557][307 ms][DEBUG] targetPkg: running [2025-08-23 14:48:04][351199558339557][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 14:48:04][351199558339557][307 ms][DEBUG] START check_boot_completed [2025-08-23 14:48:04][351199558339557][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:48:04][351199558339557][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:48:04][351199558339557][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:48:04][351199558339557][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:48:04][351199558339557][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:48:04][351199558339557][385 ms][DEBUG] START check_internet [2025-08-23 14:48:04][351199558339557][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.145/199.145/199.145/0.000 ms\n [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] check_internet: online [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] END check_internet in 562 ms [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:48:04][351199558339557][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558339557\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1737\"}'\'' -e'"" [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:48:04][351199558339557][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558339557\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1737\"}'\'' -e'"" [2025-08-23 14:48:09][351199558339557][5180 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17041769-90da-408d-98f8-501a6230d6eb","id":"QR_17041769-90da-408d-98f8-501a6230d6eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:48:09][351199558339557][5337 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 14:48:09][351199558339557][5337 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 14:48:09][351199558339557][5337 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:50:02][350832440493619][1 ms][INFO] === Request start === [2025-08-23 14:50:02][350832440493619][1 ms][DEBUG] START check_scloud [2025-08-23 14:50:02][350832440493619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:50:03][350832440493619][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 8888 19068 24362108 194684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:50:03][350832440493619][298 ms][DEBUG] targetPkg: running [2025-08-23 14:50:03][350832440493619][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 14:50:03][350832440493619][298 ms][DEBUG] START check_boot_completed [2025-08-23 14:50:03][350832440493619][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:50:03][350832440493619][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:50:03][350832440493619][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:50:03][350832440493619][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:50:03][350832440493619][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 14:50:03][350832440493619][394 ms][DEBUG] START check_internet [2025-08-23 14:50:03][350832440493619][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:50:03][350832440493619][908 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.580/206.580/206.580/0.000 ms\n [2025-08-23 14:50:03][350832440493619][908 ms][DEBUG] check_internet: online [2025-08-23 14:50:03][350832440493619][908 ms][DEBUG] END check_internet in 515 ms [2025-08-23 14:50:03][350832440493619][908 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:50:03][350832440493619][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440493619\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2037\"}'\'' -e'"" [2025-08-23 14:50:03][350832440493619][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:50:03][350832440493619][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440493619\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2037\"}'\'' -e'"" [2025-08-23 14:50:08][350832440493619][5016 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7009c719-2db8-4358-8fb0-3a506fc5a7cd","id":"QR_7009c719-2db8-4358-8fb0-3a506fc5a7cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:50:08][350832440493619][5172 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=3343 [2025-08-23 14:50:08][350832440493619][5172 ms][DEBUG] END runCmdUntilRes#1 in 4263 ms [2025-08-23 14:50:08][350832440493619][5172 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:51:05][351676568574976][1 ms][INFO] === Request start === [2025-08-23 14:51:05][351676568574976][1 ms][DEBUG] START check_scloud [2025-08-23 14:51:05][351676568574976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:51:05][351676568574976][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 8888 19068 24488288 206744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:51:05][351676568574976][266 ms][DEBUG] targetPkg: running [2025-08-23 14:51:05][351676568574976][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-23 14:51:05][351676568574976][267 ms][DEBUG] START check_boot_completed [2025-08-23 14:51:05][351676568574976][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:51:05][351676568574976][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:51:05][351676568574976][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:51:05][351676568574976][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:51:05][351676568574976][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:51:05][351676568574976][360 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:51:05][351676568574976][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568574976\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1010\"}'\'' -e'"" [2025-08-23 14:51:05][351676568574976][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:51:05][351676568574976][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568574976\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1010\"}'\'' -e'"" [2025-08-23 14:51:12][351676568574976][7296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46db37bf-5d71-4b7e-b918-33033576ae4d","id":"QR_46db37bf-5d71-4b7e-b918-33033576ae4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:51:12][351676568574976][7452 ms][DEBUG] proc_open done in 7091 ms; code=255; res.len=3343 [2025-08-23 14:51:12][351676568574976][7452 ms][DEBUG] END runCmdUntilRes#1 in 7092 ms [2025-08-23 14:51:12][351676568574976][7452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:51:16][357262978043920][0 ms][INFO] === Request start === [2025-08-23 14:51:16][357262978043920][0 ms][DEBUG] START check_scloud [2025-08-23 14:51:16][357262978043920][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:51:16][357262978043920][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 8888 19068 24612328 217480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:51:16][357262978043920][295 ms][DEBUG] targetPkg: running [2025-08-23 14:51:16][357262978043920][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 14:51:16][357262978043920][295 ms][DEBUG] START check_boot_completed [2025-08-23 14:51:16][357262978043920][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:51:17][357262978043920][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:51:17][357262978043920][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:51:17][357262978043920][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:51:17][357262978043920][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:51:17][357262978043920][388 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:51:17][357262978043920][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262978043920\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5650\"}'\'' -e'"" [2025-08-23 14:51:17][357262978043920][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:51:17][357262978043920][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262978043920\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5650\"}'\'' -e'"" [2025-08-23 14:51:21][357262978043920][4512 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c85a6836-7fc3-41f7-bd29-75263f30c0fd","id":"QR_c85a6836-7fc3-41f7-bd29-75263f30c0fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:51:21][357262978043920][4668 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 14:51:21][357262978043920][4668 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 14:51:21][357262978043920][4668 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:52:01][350973420529152][1 ms][INFO] === Request start === [2025-08-23 14:52:01][350973420529152][1 ms][DEBUG] START check_scloud [2025-08-23 14:52:01][350973420529152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:52:02][350973420529152][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 8888 19068 24711720 229440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:52:02][350973420529152][302 ms][DEBUG] targetPkg: running [2025-08-23 14:52:02][350973420529152][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 14:52:02][350973420529152][302 ms][DEBUG] START check_boot_completed [2025-08-23 14:52:02][350973420529152][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:52:02][350973420529152][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:52:02][350973420529152][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:52:02][350973420529152][395 ms][DEBUG] SU: done in 46 ms; out [2025-08-23 14:52:02][350973420529152][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:52:02][350973420529152][395 ms][DEBUG] START check_internet [2025-08-23 14:52:02][350973420529152][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.214/172.214/172.214/0.000 ms\n [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] check_internet: online [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] END check_internet in 282 ms [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:52:02][350973420529152][677 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973420529152\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7627\"}'\'' -e'"" [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:52:02][350973420529152][677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973420529152\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7627\"}'\'' -e'"" [2025-08-23 14:52:06][350973420529152][4316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b769064-3cab-46aa-bb8d-16e2ca0caadc","id":"QR_4b769064-3cab-46aa-bb8d-16e2ca0caadc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:52:06][350973420529152][4472 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-23 14:52:06][350973420529152][4473 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-23 14:52:06][350973420529152][4473 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:52:08][357967978444809][0 ms][INFO] === Request start === [2025-08-23 14:52:08][357967978444809][1 ms][DEBUG] START check_scloud [2025-08-23 14:52:08][357967978444809][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:52:09][357967978444809][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 8888 19068 24874608 240572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:52:09][357967978444809][289 ms][DEBUG] targetPkg: running [2025-08-23 14:52:09][357967978444809][289 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 14:52:09][357967978444809][290 ms][DEBUG] START check_boot_completed [2025-08-23 14:52:09][357967978444809][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:52:09][357967978444809][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:52:09][357967978444809][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:52:09][357967978444809][414 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 14:52:09][357967978444809][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 14:52:09][357967978444809][414 ms][DEBUG] START check_internet [2025-08-23 14:52:09][357967978444809][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.448/184.448/184.448/0.000 ms\n [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] check_internet: online [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] END check_internet in 281 ms [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:52:09][357967978444809][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978444809\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7172\"}'\'' -e'"" [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:52:09][357967978444809][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978444809\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7172\"}'\'' -e'"" [2025-08-23 14:52:13][357967978444809][4538 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 14:52:13][357967978444809][4539 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-23 14:52:13][357967978444809][4539 ms][WARN] Detected error: Process with pid 8888 either refused to load frida-agent, or terminated during injection [2025-08-23 14:52:13][357967978444809][4539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:52:13][357967978444809][4695 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 14:52:13][357967978444809][4695 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:52:13][357967978444809][4695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:52:13][357967978444809][4835 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 14:52:13][357967978444809][4835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:52:13][357967978444809][5007 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:52:15][357967978444809][7022 ms][DEBUG] START check_boot_completed [2025-08-23 14:52:15][357967978444809][7022 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:52:16][357967978444809][7069 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:52:16][357967978444809][7069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:52:16][357967978444809][7131 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:52:16][357967978444809][7132 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 14:52:19][357967978444809][10146 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:52:19][357967978444809][10146 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978444809\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7172\"}'\'' -e'"" [2025-08-23 14:52:23][357967978444809][14177 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d14c1c1d-c900-4d6f-a895-68422b2dd5ae","id":"QR_d14c1c1d-c900-4d6f-a895-68422b2dd5ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:52:23][357967978444809][14333 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 14:52:23][357967978444809][14333 ms][DEBUG] END runCmdUntilRes#2 in 4187 ms [2025-08-23 14:52:23][357967978444809][14333 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:52:25][352674520224284][0 ms][INFO] === Request start === [2025-08-23 14:52:25][352674520224284][1 ms][DEBUG] START check_scloud [2025-08-23 14:52:25][352674520224284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:52:26][352674520224284][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 10337 19068 23594524 123484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:52:26][352674520224284][292 ms][DEBUG] targetPkg: running [2025-08-23 14:52:26][352674520224284][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 14:52:26][352674520224284][292 ms][DEBUG] START check_boot_completed [2025-08-23 14:52:26][352674520224284][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:52:26][352674520224284][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:52:26][352674520224284][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:52:26][352674520224284][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:52:26][352674520224284][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:52:26][352674520224284][386 ms][DEBUG] START check_internet [2025-08-23 14:52:26][352674520224284][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:52:26][352674520224284][729 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.885/242.885/242.885/0.000 ms\n [2025-08-23 14:52:26][352674520224284][729 ms][DEBUG] check_internet: online [2025-08-23 14:52:26][352674520224284][729 ms][DEBUG] END check_internet in 344 ms [2025-08-23 14:52:26][352674520224284][729 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:52:26][352674520224284][730 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520224284\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-08-23 14:52:26][352674520224284][730 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:52:26][352674520224284][730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520224284\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-08-23 14:52:30][352674520224284][4353 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57e0a851-c5d8-4083-a55a-36adc88c38c1","id":"QR_57e0a851-c5d8-4083-a55a-36adc88c38c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:52:30][352674520224284][4509 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-23 14:52:30][352674520224284][4510 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-23 14:52:30][352674520224284][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:53:03][352600225522953][0 ms][INFO] === Request start === [2025-08-23 14:53:03][352600225522953][1 ms][DEBUG] START check_scloud [2025-08-23 14:53:03][352600225522953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:53:03][352600225522953][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10337 19068 23688696 137244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:53:03][352600225522953][307 ms][DEBUG] targetPkg: running [2025-08-23 14:53:03][352600225522953][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 14:53:03][352600225522953][307 ms][DEBUG] START check_boot_completed [2025-08-23 14:53:03][352600225522953][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:53:03][352600225522953][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:53:03][352600225522953][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:53:03][352600225522953][432 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 14:53:03][352600225522953][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 14:53:03][352600225522953][432 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:53:03][352600225522953][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225522953\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4493\"}'\'' -e'"" [2025-08-23 14:53:03][352600225522953][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:53:03][352600225522953][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225522953\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4493\"}'\'' -e'"" [2025-08-23 14:53:07][352600225522953][4478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d76f01a8-e454-4898-af7d-1a1e08d3b1e9","id":"QR_d76f01a8-e454-4898-af7d-1a1e08d3b1e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:53:07][352600225522953][4634 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 14:53:07][352600225522953][4634 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 14:53:07][352600225522953][4634 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:54:03][352501915162193][1 ms][INFO] === Request start === [2025-08-23 14:54:03][352501915162193][1 ms][DEBUG] START check_scloud [2025-08-23 14:54:03][352501915162193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:54:04][352501915162193][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 10337 19068 23792284 148988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:54:04][352501915162193][298 ms][DEBUG] targetPkg: running [2025-08-23 14:54:04][352501915162193][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 14:54:04][352501915162193][298 ms][DEBUG] START check_boot_completed [2025-08-23 14:54:04][352501915162193][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:54:04][352501915162193][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:54:04][352501915162193][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:54:04][352501915162193][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:54:04][352501915162193][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:54:04][352501915162193][393 ms][DEBUG] START check_internet [2025-08-23 14:54:04][352501915162193][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.487/255.487/255.487/0.000 ms\n [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] check_internet: online [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] END check_internet in 374 ms [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:54:04][352501915162193][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501915162193\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9715\"}'\'' -e'"" [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:54:04][352501915162193][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501915162193\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9715\"}'\'' -e'"" [2025-08-23 14:54:08][352501915162193][4859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e36809af-70b5-4529-b22a-1218d64c964a","id":"QR_e36809af-70b5-4529-b22a-1218d64c964a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:54:08][352501915162193][5015 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 14:54:08][352501915162193][5015 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 14:54:08][352501915162193][5016 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:56:07][350637542643338][1 ms][INFO] === Request start === [2025-08-23 14:56:07][350637542643338][1 ms][DEBUG] START check_scloud [2025-08-23 14:56:07][350637542643338][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:56:08][350637542643338][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 10337 19068 23896500 160024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:56:08][350637542643338][301 ms][DEBUG] targetPkg: running [2025-08-23 14:56:08][350637542643338][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 14:56:08][350637542643338][302 ms][DEBUG] START check_boot_completed [2025-08-23 14:56:08][350637542643338][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:56:08][350637542643338][346 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 14:56:08][350637542643338][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:56:08][350637542643338][394 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 14:56:08][350637542643338][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 14:56:08][350637542643338][394 ms][DEBUG] START check_internet [2025-08-23 14:56:08][350637542643338][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.008/199.008/199.008/0.000 ms\n [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] check_internet: online [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] END check_internet in 485 ms [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:56:08][350637542643338][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542643338\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9101\"}'\'' -e'"" [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:56:08][350637542643338][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542643338\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9101\"}'\'' -e'"" [2025-08-23 14:56:18][350637542643338][10953 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_949f77fa-5ce8-4a38-a171-296181e98031","id":"QR_949f77fa-5ce8-4a38-a171-296181e98031","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:56:18][350637542643338][11109 ms][DEBUG] proc_open done in 10230 ms; code=255; res.len=3343 [2025-08-23 14:56:18][350637542643338][11109 ms][DEBUG] END runCmdUntilRes#1 in 10230 ms [2025-08-23 14:56:18][350637542643338][11109 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:56:24][352288968639059][0 ms][INFO] === Request start === [2025-08-23 14:56:24][352288968639059][0 ms][DEBUG] START check_scloud [2025-08-23 14:56:24][352288968639059][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:56:24][352288968639059][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 10337 19068 24055356 170824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:56:24][352288968639059][293 ms][DEBUG] targetPkg: running [2025-08-23 14:56:24][352288968639059][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 14:56:24][352288968639059][293 ms][DEBUG] START check_boot_completed [2025-08-23 14:56:24][352288968639059][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:56:24][352288968639059][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:56:24][352288968639059][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:56:24][352288968639059][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:56:24][352288968639059][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:56:24][352288968639059][371 ms][DEBUG] START check_internet [2025-08-23 14:56:24][352288968639059][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:56:24][352288968639059][730 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.805/259.805/259.805/0.000 ms\n [2025-08-23 14:56:24][352288968639059][730 ms][DEBUG] check_internet: online [2025-08-23 14:56:24][352288968639059][730 ms][DEBUG] END check_internet in 360 ms [2025-08-23 14:56:24][352288968639059][731 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:56:24][352288968639059][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-08-23 14:56:24][352288968639059][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:56:24][352288968639059][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-08-23 14:56:28][352288968639059][4682 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 14:56:29][352288968639059][4838 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=115 [2025-08-23 14:56:29][352288968639059][4838 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 14:56:29][352288968639059][4839 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 14:56:29][][0 ms][INFO] === Request start === [2025-08-23 14:56:29][][1 ms][DEBUG] START check_scloud [2025-08-23 14:56:29][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:56:29][][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10337 19068 24181380 182536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:56:29][][304 ms][DEBUG] targetPkg: running [2025-08-23 14:56:29][][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 14:56:29][][304 ms][DEBUG] START check_boot_completed [2025-08-23 14:56:29][][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:56:29][][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:56:29][][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:56:29][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:56:29][][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:56:29][][397 ms][DEBUG] START check_internet [2025-08-23 14:56:29][][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:56:30][][647 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.164/139.164/139.164/0.000 ms\n [2025-08-23 14:56:30][][647 ms][DEBUG] check_internet: online [2025-08-23 14:56:30][][647 ms][DEBUG] END check_internet in 250 ms [2025-08-23 14:56:30][][647 ms][DEBUG] rawBody.length=1129 [2025-08-23 14:56:30][][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC03S48R\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9488\"}'\'' -e'"" [2025-08-23 14:56:30][][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:56:30][][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC03S48R\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9488\"}'\'' -e'"" [2025-08-23 14:56:33][][4178 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 14:56:33][][4334 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=107 [2025-08-23 14:56:33][][4334 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-23 14:56:33][][4334 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 14:56:35][352288968639059][0 ms][INFO] === Request start === [2025-08-23 14:56:35][352288968639059][1 ms][DEBUG] START check_scloud [2025-08-23 14:56:35][352288968639059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:56:36][352288968639059][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 10337 19068 24293032 193488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:56:36][352288968639059][317 ms][DEBUG] targetPkg: running [2025-08-23 14:56:36][352288968639059][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 14:56:36][352288968639059][317 ms][DEBUG] START check_boot_completed [2025-08-23 14:56:36][352288968639059][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:56:36][352288968639059][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 14:56:36][352288968639059][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:56:36][352288968639059][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:56:36][352288968639059][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 14:56:36][352288968639059][396 ms][DEBUG] START check_internet [2025-08-23 14:56:36][352288968639059][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.717/249.717/249.717/0.000 ms\n [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] check_internet: online [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] END check_internet in 375 ms [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:56:36][352288968639059][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:56:36][352288968639059][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-08-23 14:56:41][352288968639059][5941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0916b43-2e26-4a96-a523-314a1cdfe334","id":"QR_c0916b43-2e26-4a96-a523-314a1cdfe334","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:56:41][352288968639059][6097 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 14:56:41][352288968639059][6097 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-23 14:56:41][352288968639059][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:57:03][350299949592368][0 ms][INFO] === Request start === [2025-08-23 14:57:03][350299949592368][1 ms][DEBUG] START check_scloud [2025-08-23 14:57:03][350299949592368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:57:03][350299949592368][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10337 19068 24382148 205672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:57:03][350299949592368][322 ms][DEBUG] targetPkg: running [2025-08-23 14:57:03][350299949592368][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 14:57:03][350299949592368][322 ms][DEBUG] START check_boot_completed [2025-08-23 14:57:03][350299949592368][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:57:03][350299949592368][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:57:03][350299949592368][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:57:03][350299949592368][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:57:03][350299949592368][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:57:03][350299949592368][431 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:57:03][350299949592368][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299949592368\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4071\"}'\'' -e'"" [2025-08-23 14:57:03][350299949592368][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:57:03][350299949592368][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299949592368\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4071\"}'\'' -e'"" [2025-08-23 14:57:07][350299949592368][4446 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61880463-d144-4587-a74d-7a34c15d1ab8","id":"QR_61880463-d144-4587-a74d-7a34c15d1ab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:57:08][350299949592368][4602 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 14:57:08][350299949592368][4602 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 14:57:08][350299949592368][4602 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:57:10][358649680579549][0 ms][INFO] === Request start === [2025-08-23 14:57:10][358649680579549][1 ms][DEBUG] START check_scloud [2025-08-23 14:57:10][358649680579549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:57:10][358649680579549][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 10337 19068 24520524 216520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:57:10][358649680579549][260 ms][DEBUG] targetPkg: running [2025-08-23 14:57:10][358649680579549][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 14:57:10][358649680579549][260 ms][DEBUG] START check_boot_completed [2025-08-23 14:57:10][358649680579549][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:57:10][358649680579549][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:57:10][358649680579549][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:57:10][358649680579549][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:57:10][358649680579549][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:57:10][358649680579549][370 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:57:10][358649680579549][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649680579549\",\"model\":\"SM-G998D\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2677\"}'\'' -e'"" [2025-08-23 14:57:10][358649680579549][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:57:10][358649680579549][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649680579549\",\"model\":\"SM-G998D\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2677\"}'\'' -e'"" [2025-08-23 14:57:14][358649680579549][4322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29fd2ffc-3317-42d9-a769-ec3a0809dbd4","id":"QR_29fd2ffc-3317-42d9-a769-ec3a0809dbd4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:57:15][358649680579549][4478 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 14:57:15][358649680579549][4478 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 14:57:15][358649680579549][4478 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:57:17][351786692262289][0 ms][INFO] === Request start === [2025-08-23 14:57:17][351786692262289][1 ms][DEBUG] START check_scloud [2025-08-23 14:57:17][351786692262289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:57:18][351786692262289][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 10337 19068 24665044 228304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:57:18][351786692262289][314 ms][DEBUG] targetPkg: running [2025-08-23 14:57:18][351786692262289][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 14:57:18][351786692262289][314 ms][DEBUG] START check_boot_completed [2025-08-23 14:57:18][351786692262289][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:57:18][351786692262289][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:57:18][351786692262289][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:57:18][351786692262289][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:57:18][351786692262289][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:57:18][351786692262289][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:57:18][351786692262289][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692262289\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5460\"}'\'' -e'"" [2025-08-23 14:57:18][351786692262289][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:57:18][351786692262289][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692262289\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5460\"}'\'' -e'"" [2025-08-23 14:57:21][351786692262289][4125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afbc443f-5771-46f9-a52e-9654770af2ab","id":"QR_afbc443f-5771-46f9-a52e-9654770af2ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:57:21][351786692262289][4281 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-23 14:57:21][351786692262289][4281 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 14:57:21][351786692262289][4282 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:58:03][357967972267529][0 ms][INFO] === Request start === [2025-08-23 14:58:03][357967972267529][1 ms][DEBUG] START check_scloud [2025-08-23 14:58:03][357967972267529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:58:04][357967972267529][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10337 19068 24790988 240336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:58:04][357967972267529][304 ms][DEBUG] targetPkg: running [2025-08-23 14:58:04][357967972267529][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 14:58:04][357967972267529][304 ms][DEBUG] START check_boot_completed [2025-08-23 14:58:04][357967972267529][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:58:04][357967972267529][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:58:04][357967972267529][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:58:04][357967972267529][413 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 14:58:04][357967972267529][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:58:04][357967972267529][413 ms][DEBUG] START check_internet [2025-08-23 14:58:04][357967972267529][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.644/217.644/217.644/0.000 ms\n [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] check_internet: online [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] END check_internet in 327 ms [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:58:04][357967972267529][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972267529\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6044\"}'\'' -e'"" [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:58:04][357967972267529][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972267529\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6044\"}'\'' -e'"" [2025-08-23 14:58:08][357967972267529][4380 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 14:58:08][357967972267529][4380 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-23 14:58:08][357967972267529][4380 ms][WARN] Detected error: Process with pid 10337 either refused to load frida-agent, or terminated during injection [2025-08-23 14:58:08][357967972267529][4380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 14:58:08][357967972267529][4536 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 14:58:08][357967972267529][4536 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 14:58:08][357967972267529][4536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 14:58:08][357967972267529][4677 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 14:58:08][357967972267529][4677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 14:58:08][357967972267529][4833 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 14:58:10][357967972267529][6848 ms][DEBUG] START check_boot_completed [2025-08-23 14:58:10][357967972267529][6848 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:58:10][357967972267529][6895 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:58:10][357967972267529][6895 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:58:10][357967972267529][6942 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:58:10][357967972267529][6942 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 14:58:13][357967972267529][9957 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 14:58:13][357967972267529][9957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972267529\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6044\"}'\'' -e'"" [2025-08-23 14:58:17][357967972267529][13971 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_772d8196-0fd6-4e5f-b152-2de57375f9c6","id":"QR_772d8196-0fd6-4e5f-b152-2de57375f9c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:58:17][357967972267529][14128 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 14:58:17][357967972267529][14128 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-23 14:58:17][357967972267529][14128 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:58:22][351406753972680][1 ms][INFO] === Request start === [2025-08-23 14:58:22][351406753972680][1 ms][DEBUG] START check_scloud [2025-08-23 14:58:22][351406753972680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:58:22][351406753972680][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 11605 19068 23624188 123676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:58:22][351406753972680][297 ms][DEBUG] targetPkg: running [2025-08-23 14:58:22][351406753972680][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 14:58:22][351406753972680][297 ms][DEBUG] START check_boot_completed [2025-08-23 14:58:22][351406753972680][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:58:22][351406753972680][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:58:22][351406753972680][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:58:22][351406753972680][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:58:22][351406753972680][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:58:22][351406753972680][390 ms][DEBUG] START check_internet [2025-08-23 14:58:22][351406753972680][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.513/195.513/195.513/0.000 ms\n [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] check_internet: online [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] END check_internet in 297 ms [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] rawBody.length=1149 [2025-08-23 14:58:22][351406753972680][687 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406753972680\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1528\"}'\'' -e'"" [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:58:22][351406753972680][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406753972680\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1528\"}'\'' -e'"" [2025-08-23 14:58:28][351406753972680][6029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63d59c29-1b22-4d29-a48a-5b5e65d2d2e1","id":"QR_63d59c29-1b22-4d29-a48a-5b5e65d2d2e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:58:28][351406753972680][6186 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-08-23 14:58:28][351406753972680][6186 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-08-23 14:58:28][351406753972680][6186 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:59:03][350517929833522][0 ms][INFO] === Request start === [2025-08-23 14:59:03][350517929833522][1 ms][DEBUG] START check_scloud [2025-08-23 14:59:03][350517929833522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:59:03][350517929833522][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 11605 19068 23718236 137792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:59:03][350517929833522][306 ms][DEBUG] targetPkg: running [2025-08-23 14:59:03][350517929833522][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 14:59:03][350517929833522][306 ms][DEBUG] START check_boot_completed [2025-08-23 14:59:03][350517929833522][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:59:03][350517929833522][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:59:03][350517929833522][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:59:03][350517929833522][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:59:03][350517929833522][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:59:03][350517929833522][415 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:59:03][350517929833522][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517929833522\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8230\"}'\'' -e'"" [2025-08-23 14:59:03][350517929833522][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:59:03][350517929833522][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517929833522\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8230\"}'\'' -e'"" [2025-08-23 14:59:07][350517929833522][4398 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad12a120-1a52-446a-9fd1-a7c66ff6e01e","id":"QR_ad12a120-1a52-446a-9fd1-a7c66ff6e01e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:59:08][350517929833522][4555 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-23 14:59:08][350517929833522][4555 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-23 14:59:08][350517929833522][4555 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:59:10][353718685193153][0 ms][INFO] === Request start === [2025-08-23 14:59:10][353718685193153][1 ms][DEBUG] START check_scloud [2025-08-23 14:59:10][353718685193153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:59:11][353718685193153][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11605 19068 23883172 148640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:59:11][353718685193153][298 ms][DEBUG] targetPkg: running [2025-08-23 14:59:11][353718685193153][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 14:59:11][353718685193153][298 ms][DEBUG] START check_boot_completed [2025-08-23 14:59:11][353718685193153][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:59:11][353718685193153][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 14:59:11][353718685193153][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:59:11][353718685193153][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 14:59:11][353718685193153][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 14:59:11][353718685193153][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:59:11][353718685193153][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718685193153\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2279\"}'\'' -e'"" [2025-08-23 14:59:11][353718685193153][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:59:11][353718685193153][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718685193153\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2279\"}'\'' -e'"" [2025-08-23 14:59:14][353718685193153][4093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ea0be6-9049-487a-8ad0-3657eb460c81","id":"QR_b8ea0be6-9049-487a-8ad0-3657eb460c81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:59:14][353718685193153][4250 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-23 14:59:14][353718685193153][4250 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-23 14:59:14][353718685193153][4250 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:59:17][352677530657815][0 ms][INFO] === Request start === [2025-08-23 14:59:17][352677530657815][1 ms][DEBUG] START check_scloud [2025-08-23 14:59:17][352677530657815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:59:17][352677530657815][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11605 19068 24011500 159712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:59:17][352677530657815][308 ms][DEBUG] targetPkg: running [2025-08-23 14:59:17][352677530657815][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 14:59:17][352677530657815][308 ms][DEBUG] START check_boot_completed [2025-08-23 14:59:17][352677530657815][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:59:17][352677530657815][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 14:59:17][352677530657815][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:59:18][352677530657815][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:59:18][352677530657815][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 14:59:18][352677530657815][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:59:18][352677530657815][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530657815\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4585\"}'\'' -e'"" [2025-08-23 14:59:18][352677530657815][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:59:18][352677530657815][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530657815\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4585\"}'\'' -e'"" [2025-08-23 14:59:21][352677530657815][4367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_021dd1f5-dc67-4d5d-93aa-e6f963cb1f22","id":"QR_021dd1f5-dc67-4d5d-93aa-e6f963cb1f22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:59:22][352677530657815][4523 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-23 14:59:22][352677530657815][4523 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-23 14:59:22][352677530657815][4524 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 14:59:24][353684143541617][0 ms][INFO] === Request start === [2025-08-23 14:59:24][353684143541617][1 ms][DEBUG] START check_scloud [2025-08-23 14:59:24][353684143541617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 14:59:25][353684143541617][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 11605 19068 24137616 171604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 14:59:25][353684143541617][300 ms][DEBUG] targetPkg: running [2025-08-23 14:59:25][353684143541617][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 14:59:25][353684143541617][300 ms][DEBUG] START check_boot_completed [2025-08-23 14:59:25][353684143541617][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 14:59:25][353684143541617][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 14:59:25][353684143541617][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 14:59:25][353684143541617][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 14:59:25][353684143541617][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 14:59:25][353684143541617][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 14:59:25][353684143541617][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143541617\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9933\"}'\'' -e'"" [2025-08-23 14:59:25][353684143541617][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 14:59:25][353684143541617][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143541617\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9933\"}'\'' -e'"" [2025-08-23 14:59:28][353684143541617][4080 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b86ffd36-bde4-48ee-b42e-23160c4c0861","id":"QR_b86ffd36-bde4-48ee-b42e-23160c4c0861","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 14:59:28][353684143541617][4236 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-23 14:59:28][353684143541617][4236 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-23 14:59:28][353684143541617][4236 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:00:03][351692593400467][0 ms][INFO] === Request start === [2025-08-23 15:00:03][351692593400467][1 ms][DEBUG] START check_scloud [2025-08-23 15:00:03][351692593400467][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:00:04][351692593400467][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 11605 19068 24239020 182868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:00:04][351692593400467][270 ms][DEBUG] targetPkg: running [2025-08-23 15:00:04][351692593400467][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-23 15:00:04][351692593400467][270 ms][DEBUG] START check_boot_completed [2025-08-23 15:00:04][351692593400467][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:00:04][351692593400467][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:00:04][351692593400467][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:00:04][351692593400467][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:00:04][351692593400467][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:00:04][351692593400467][363 ms][DEBUG] START check_internet [2025-08-23 15:00:04][351692593400467][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:00:04][351692593400467][816 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.073/202.073/202.073/0.000 ms\n [2025-08-23 15:00:04][351692593400467][816 ms][DEBUG] check_internet: online [2025-08-23 15:00:04][351692593400467][816 ms][DEBUG] END check_internet in 453 ms [2025-08-23 15:00:04][351692593400467][817 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:00:04][351692593400467][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692593400467\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6132\"}'\'' -e'"" [2025-08-23 15:00:04][351692593400467][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:00:04][351692593400467][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692593400467\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6132\"}'\'' -e'"" [2025-08-23 15:00:08][351692593400467][5002 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01a41638-8500-4305-a8bb-c68af80c9d5c","id":"QR_01a41638-8500-4305-a8bb-c68af80c9d5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:00:09][351692593400467][5159 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-23 15:00:09][351692593400467][5159 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-23 15:00:09][351692593400467][5159 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:00:11][354464116253204][0 ms][INFO] === Request start === [2025-08-23 15:00:11][354464116253204][1 ms][DEBUG] START check_scloud [2025-08-23 15:00:11][354464116253204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:00:11][354464116253204][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 11605 19068 24368232 195624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:00:11][354464116253204][289 ms][DEBUG] targetPkg: running [2025-08-23 15:00:11][354464116253204][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 15:00:11][354464116253204][289 ms][DEBUG] START check_boot_completed [2025-08-23 15:00:11][354464116253204][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:00:11][354464116253204][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:00:11][354464116253204][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:00:11][354464116253204][382 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:00:11][354464116253204][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:00:11][354464116253204][383 ms][DEBUG] START check_internet [2025-08-23 15:00:11][354464116253204][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:00:12][354464116253204][757 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.544/250.544/250.544/0.000 ms\n [2025-08-23 15:00:12][354464116253204][758 ms][DEBUG] check_internet: online [2025-08-23 15:00:12][354464116253204][758 ms][DEBUG] END check_internet in 375 ms [2025-08-23 15:00:12][354464116253204][758 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:00:12][354464116253204][758 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464116253204\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3198\"}'\'' -e'"" [2025-08-23 15:00:12][354464116253204][758 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:00:12][354464116253204][758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464116253204\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3198\"}'\'' -e'"" [2025-08-23 15:00:16][354464116253204][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da168a9d-c507-4bf9-8c90-8bdef84b9298","id":"QR_da168a9d-c507-4bf9-8c90-8bdef84b9298","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:00:16][354464116253204][4647 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-23 15:00:16][354464116253204][4647 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:00:16][354464116253204][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:00:20][355970533193293][0 ms][INFO] === Request start === [2025-08-23 15:00:20][355970533193293][1 ms][DEBUG] START check_scloud [2025-08-23 15:00:20][355970533193293][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:00:20][355970533193293][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11605 19068 24516848 206084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:00:20][355970533193293][299 ms][DEBUG] targetPkg: running [2025-08-23 15:00:20][355970533193293][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 15:00:20][355970533193293][299 ms][DEBUG] START check_boot_completed [2025-08-23 15:00:20][355970533193293][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:00:20][355970533193293][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:00:20][355970533193293][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:00:21][355970533193293][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:00:21][355970533193293][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:00:21][355970533193293][393 ms][DEBUG] START check_internet [2025-08-23 15:00:21][355970533193293][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:00:21][355970533193293][705 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.107/189.107/189.107/0.000 ms\n [2025-08-23 15:00:21][355970533193293][705 ms][DEBUG] check_internet: online [2025-08-23 15:00:21][355970533193293][705 ms][DEBUG] END check_internet in 312 ms [2025-08-23 15:00:21][355970533193293][705 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:00:21][355970533193293][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533193293\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4564\"}'\'' -e'"" [2025-08-23 15:00:21][355970533193293][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:00:21][355970533193293][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533193293\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4564\"}'\'' -e'"" [2025-08-23 15:00:26][355970533193293][6047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bad8544d-e534-484b-bdd0-db0b8bda42c4","id":"QR_bad8544d-e534-484b-bdd0-db0b8bda42c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:00:26][355970533193293][6204 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-08-23 15:00:26][355970533193293][6204 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-08-23 15:00:26][355970533193293][6204 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:00:31][354916446809559][1 ms][INFO] === Request start === [2025-08-23 15:00:31][354916446809559][1 ms][DEBUG] START check_scloud [2025-08-23 15:00:31][354916446809559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:00:32][354916446809559][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 11605 19068 24640944 217012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:00:32][354916446809559][307 ms][DEBUG] targetPkg: running [2025-08-23 15:00:32][354916446809559][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 15:00:32][354916446809559][307 ms][DEBUG] START check_boot_completed [2025-08-23 15:00:32][354916446809559][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:00:32][354916446809559][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:00:32][354916446809559][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:00:32][354916446809559][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:00:32][354916446809559][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:00:32][354916446809559][402 ms][DEBUG] START check_internet [2025-08-23 15:00:32][354916446809559][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.897/241.897/241.897/0.000 ms\n [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] check_internet: online [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] END check_internet in 343 ms [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:00:32][354916446809559][744 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446809559\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:00:32][354916446809559][744 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446809559\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-08-23 15:00:36][354916446809559][4727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf62dd61-5845-494e-825e-dff86c091e45","id":"QR_bf62dd61-5845-494e-825e-dff86c091e45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:00:36][354916446809559][4884 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 15:00:36][354916446809559][4884 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 15:00:36][354916446809559][4884 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:01:04][358141431694702][1 ms][INFO] === Request start === [2025-08-23 15:01:04][358141431694702][1 ms][DEBUG] START check_scloud [2025-08-23 15:01:04][358141431694702][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:01:04][358141431694702][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11605 19068 24760040 229324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:01:04][358141431694702][308 ms][DEBUG] targetPkg: running [2025-08-23 15:01:04][358141431694702][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:01:04][358141431694702][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:01:04][358141431694702][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:01:04][358141431694702][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:01:04][358141431694702][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:01:04][358141431694702][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:01:04][358141431694702][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:01:04][358141431694702][402 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:01:04][358141431694702][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431694702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-08-23 15:01:04][358141431694702][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:01:04][358141431694702][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431694702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-08-23 15:01:08][358141431694702][4166 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0900d7f-701f-47ee-9f90-764781da8d39","id":"QR_a0900d7f-701f-47ee-9f90-764781da8d39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:01:08][358141431694702][4322 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-23 15:01:08][358141431694702][4322 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 15:01:08][358141431694702][4323 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:02:02][352001418380814][0 ms][INFO] === Request start === [2025-08-23 15:02:02][352001418380814][1 ms][DEBUG] START check_scloud [2025-08-23 15:02:02][352001418380814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:02:03][352001418380814][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11605 19068 24899560 241196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:02:03][352001418380814][305 ms][DEBUG] targetPkg: running [2025-08-23 15:02:03][352001418380814][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 15:02:03][352001418380814][305 ms][DEBUG] START check_boot_completed [2025-08-23 15:02:03][352001418380814][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:02:03][352001418380814][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:02:03][352001418380814][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:02:03][352001418380814][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:02:03][352001418380814][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:02:03][352001418380814][414 ms][DEBUG] START check_internet [2025-08-23 15:02:03][352001418380814][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:02:03][352001418380814][695 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.713/174.713/174.713/0.000 ms\n [2025-08-23 15:02:03][352001418380814][695 ms][DEBUG] check_internet: online [2025-08-23 15:02:03][352001418380814][696 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:02:03][352001418380814][696 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:02:03][352001418380814][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001418380814\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9614\"}'\'' -e'"" [2025-08-23 15:02:03][352001418380814][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:02:03][352001418380814][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001418380814\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9614\"}'\'' -e'"" [2025-08-23 15:02:07][352001418380814][4366 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:02:07][352001418380814][4367 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-23 15:02:07][352001418380814][4367 ms][WARN] Detected error: Process with pid 11605 either refused to load frida-agent, or terminated during injection [2025-08-23 15:02:07][352001418380814][4367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:02:07][352001418380814][4523 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 15:02:07][352001418380814][4523 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:02:07][352001418380814][4523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:02:07][352001418380814][4663 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 15:02:07][352001418380814][4663 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:02:07][352001418380814][4819 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:02:09][352001418380814][6834 ms][DEBUG] START check_boot_completed [2025-08-23 15:02:09][352001418380814][6834 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:02:09][352001418380814][6881 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:02:09][352001418380814][6882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:02:09][352001418380814][6975 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:02:09][352001418380814][6975 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 15:02:12][352001418380814][9990 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:02:12][352001418380814][9990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001418380814\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9614\"}'\'' -e'"" [2025-08-23 15:02:17][352001418380814][14145 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_632ceded-246d-4a7a-8b0c-45241f763037","id":"QR_632ceded-246d-4a7a-8b0c-45241f763037","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:02:17][352001418380814][14301 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 15:02:17][352001418380814][14302 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-23 15:02:17][352001418380814][14302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:02:19][351681595156250][0 ms][INFO] === Request start === [2025-08-23 15:02:19][351681595156250][1 ms][DEBUG] START check_scloud [2025-08-23 15:02:19][351681595156250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:02:19][351681595156250][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 12823 19068 23614492 123980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:02:19][351681595156250][287 ms][DEBUG] targetPkg: running [2025-08-23 15:02:19][351681595156250][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 15:02:19][351681595156250][287 ms][DEBUG] START check_boot_completed [2025-08-23 15:02:19][351681595156250][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:02:20][351681595156250][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:02:20][351681595156250][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:02:20][351681595156250][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:02:20][351681595156250][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:02:20][351681595156250][365 ms][DEBUG] START check_internet [2025-08-23 15:02:20][351681595156250][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:02:20][351681595156250][662 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.842/201.842/201.842/0.000 ms\n [2025-08-23 15:02:20][351681595156250][662 ms][DEBUG] check_internet: online [2025-08-23 15:02:20][351681595156250][663 ms][DEBUG] END check_internet in 297 ms [2025-08-23 15:02:20][351681595156250][663 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:02:20][351681595156250][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681595156250\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5853\"}'\'' -e'"" [2025-08-23 15:02:20][351681595156250][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:02:20][351681595156250][663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681595156250\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5853\"}'\'' -e'"" [2025-08-23 15:02:23][351681595156250][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63bdef55-09bb-4162-ad17-a804af4da180","id":"QR_63bdef55-09bb-4162-ad17-a804af4da180","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:02:24][351681595156250][4411 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-23 15:02:24][351681595156250][4411 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-23 15:02:24][351681595156250][4412 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:03:05][352755851455264][1 ms][INFO] === Request start === [2025-08-23 15:03:05][352755851455264][1 ms][DEBUG] START check_scloud [2025-08-23 15:03:05][352755851455264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:03:05][352755851455264][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 12823 19068 23691128 137424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:03:05][352755851455264][314 ms][DEBUG] targetPkg: running [2025-08-23 15:03:05][352755851455264][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 15:03:05][352755851455264][314 ms][DEBUG] START check_boot_completed [2025-08-23 15:03:05][352755851455264][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:03:05][352755851455264][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:03:05][352755851455264][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:03:05][352755851455264][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:03:05][352755851455264][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:03:05][352755851455264][407 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:03:05][352755851455264][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352755851455264\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8475\"}'\'' -e'"" [2025-08-23 15:03:05][352755851455264][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:03:05][352755851455264][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352755851455264\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8475\"}'\'' -e'"" [2025-08-23 15:03:11][352755851455264][6109 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dabecd7b-1b63-492d-8cfa-43a3ef40450a","id":"QR_dabecd7b-1b63-492d-8cfa-43a3ef40450a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:03:11][352755851455264][6265 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-08-23 15:03:11][352755851455264][6265 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-23 15:03:11][352755851455264][6265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:03:42][353243885388081][0 ms][INFO] === Request start === [2025-08-23 15:03:42][353243885388081][1 ms][DEBUG] START check_scloud [2025-08-23 15:03:42][353243885388081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:03:43][353243885388081][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 12823 19068 23827484 149044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:03:43][353243885388081][298 ms][DEBUG] targetPkg: running [2025-08-23 15:03:43][353243885388081][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 15:03:43][353243885388081][298 ms][DEBUG] START check_boot_completed [2025-08-23 15:03:43][353243885388081][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:03:43][353243885388081][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:03:43][353243885388081][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:03:43][353243885388081][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:03:43][353243885388081][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:03:43][353243885388081][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:03:43][353243885388081][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2697\"}'\'' -e'"" [2025-08-23 15:03:43][353243885388081][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:03:43][353243885388081][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2697\"}'\'' -e'"" [2025-08-23 15:03:46][353243885388081][4125 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:03:46][353243885388081][4281 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-23 15:03:46][353243885388081][4281 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:03:46][353243885388081][4281 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:03:48][][0 ms][INFO] === Request start === [2025-08-23 15:03:48][][1 ms][DEBUG] START check_scloud [2025-08-23 15:03:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:03:48][][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 12823 19068 23956772 160000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:03:48][][315 ms][DEBUG] targetPkg: running [2025-08-23 15:03:48][][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 15:03:48][][315 ms][DEBUG] START check_boot_completed [2025-08-23 15:03:48][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:03:48][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:03:48][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:03:48][][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:03:48][][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:03:48][][408 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:03:48][][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3867\"}'\'' -e'"" [2025-08-23 15:03:48][][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:03:48][][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3867\"}'\'' -e'"" [2025-08-23 15:03:52][][3892 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:03:52][][4048 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=107 [2025-08-23 15:03:52][][4048 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-23 15:03:52][][4048 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:03:54][353243885388081][0 ms][INFO] === Request start === [2025-08-23 15:03:54][353243885388081][1 ms][DEBUG] START check_scloud [2025-08-23 15:03:54][353243885388081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:03:54][353243885388081][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 12823 19068 24101292 170884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:03:54][353243885388081][301 ms][DEBUG] targetPkg: running [2025-08-23 15:03:54][353243885388081][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 15:03:54][353243885388081][301 ms][DEBUG] START check_boot_completed [2025-08-23 15:03:54][353243885388081][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:03:54][353243885388081][363 ms][DEBUG] ADB: done in 62 ms; out [2025-08-23 15:03:54][353243885388081][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:03:54][353243885388081][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:03:54][353243885388081][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:03:54][353243885388081][410 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:03:54][353243885388081][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-08-23 15:03:54][353243885388081][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:03:54][353243885388081][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-08-23 15:03:59][353243885388081][5143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8314a111-bef5-46d3-82d1-0df862ecabac","id":"QR_8314a111-bef5-46d3-82d1-0df862ecabac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:03:59][353243885388081][5300 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-23 15:03:59][353243885388081][5300 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-23 15:03:59][353243885388081][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:04:30][353243885388081][1 ms][INFO] === Request start === [2025-08-23 15:04:30][353243885388081][1 ms][DEBUG] START check_scloud [2025-08-23 15:04:30][353243885388081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:04:30][353243885388081][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 12823 19068 24200728 183376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:04:30][353243885388081][315 ms][DEBUG] targetPkg: running [2025-08-23 15:04:30][353243885388081][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 15:04:30][353243885388081][315 ms][DEBUG] START check_boot_completed [2025-08-23 15:04:30][353243885388081][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:04:30][353243885388081][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:04:30][353243885388081][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:04:30][353243885388081][425 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:04:30][353243885388081][425 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 15:04:30][353243885388081][425 ms][DEBUG] START check_internet [2025-08-23 15:04:30][353243885388081][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:04:31][353243885388081][846 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.083/154.083/154.083/0.000 ms\n [2025-08-23 15:04:31][353243885388081][846 ms][DEBUG] check_internet: online [2025-08-23 15:04:31][353243885388081][846 ms][DEBUG] END check_internet in 421 ms [2025-08-23 15:04:31][353243885388081][846 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:04:31][353243885388081][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3015\"}'\'' -e'"" [2025-08-23 15:04:31][353243885388081][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:04:31][353243885388081][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3015\"}'\'' -e'"" [2025-08-23 15:04:35][353243885388081][4579 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:04:35][353243885388081][4735 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-23 15:04:35][353243885388081][4735 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:04:35][353243885388081][4736 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:04:35][][0 ms][INFO] === Request start === [2025-08-23 15:04:35][][1 ms][DEBUG] START check_scloud [2025-08-23 15:04:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:04:35][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 12823 19068 24345376 194328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:04:35][][260 ms][DEBUG] targetPkg: running [2025-08-23 15:04:35][][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 15:04:35][][260 ms][DEBUG] START check_boot_completed [2025-08-23 15:04:35][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:04:35][][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:04:35][][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:04:35][][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:04:35][][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:04:35][][354 ms][DEBUG] START check_internet [2025-08-23 15:04:35][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:04:36][][574 ms][DEBUG] SU: done in 220 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.509/132.509/132.509/0.000 ms\n [2025-08-23 15:04:36][][574 ms][DEBUG] check_internet: online [2025-08-23 15:04:36][][574 ms][DEBUG] END check_internet in 221 ms [2025-08-23 15:04:36][][574 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:04:36][][574 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1813\"}'\'' -e'"" [2025-08-23 15:04:36][][575 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:04:36][][575 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1813\"}'\'' -e'"" [2025-08-23 15:04:39][][3931 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:04:39][][4087 ms][DEBUG] proc_open done in 3512 ms; code=255; res.len=107 [2025-08-23 15:04:39][][4087 ms][DEBUG] END runCmdUntilRes#1 in 3513 ms [2025-08-23 15:04:39][][4087 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:04:41][353243885388081][0 ms][INFO] === Request start === [2025-08-23 15:04:41][353243885388081][1 ms][DEBUG] START check_scloud [2025-08-23 15:04:41][353243885388081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:04:42][353243885388081][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 12823 19068 24494120 206220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:04:42][353243885388081][312 ms][DEBUG] targetPkg: running [2025-08-23 15:04:42][353243885388081][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 15:04:42][353243885388081][312 ms][DEBUG] START check_boot_completed [2025-08-23 15:04:42][353243885388081][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:04:42][353243885388081][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:04:42][353243885388081][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:04:42][353243885388081][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:04:42][353243885388081][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:04:42][353243885388081][390 ms][DEBUG] START check_internet [2025-08-23 15:04:42][353243885388081][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:04:42][353243885388081][796 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.266/252.266/252.266/0.000 ms\n [2025-08-23 15:04:42][353243885388081][797 ms][DEBUG] check_internet: online [2025-08-23 15:04:42][353243885388081][797 ms][DEBUG] END check_internet in 406 ms [2025-08-23 15:04:42][353243885388081][797 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:04:42][353243885388081][797 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7567\"}'\'' -e'"" [2025-08-23 15:04:42][353243885388081][797 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:04:42][353243885388081][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7567\"}'\'' -e'"" [2025-08-23 15:04:47][353243885388081][5889 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afb2571f-b81d-4439-b847-499f1d726e96","id":"QR_afb2571f-b81d-4439-b847-499f1d726e96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:04:47][353243885388081][6045 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-23 15:04:47][353243885388081][6045 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-23 15:04:47][353243885388081][6046 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:05:03][350022680713724][0 ms][INFO] === Request start === [2025-08-23 15:05:03][350022680713724][1 ms][DEBUG] START check_scloud [2025-08-23 15:05:03][350022680713724][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:05:03][350022680713724][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 12823 19068 24607172 217036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:05:03][350022680713724][287 ms][DEBUG] targetPkg: running [2025-08-23 15:05:03][350022680713724][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-23 15:05:03][350022680713724][287 ms][DEBUG] START check_boot_completed [2025-08-23 15:05:03][350022680713724][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:05:03][350022680713724][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:05:03][350022680713724][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:05:03][350022680713724][396 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:05:03][350022680713724][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:05:03][350022680713724][396 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:05:03][350022680713724][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350022680713724\",\"model\":\"SM-F946B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2760\"}'\'' -e'"" [2025-08-23 15:05:03][350022680713724][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:05:03][350022680713724][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350022680713724\",\"model\":\"SM-F946B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2760\"}'\'' -e'"" [2025-08-23 15:05:07][350022680713724][4567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d65da738-e6af-4917-ac29-7e689ef33959","id":"QR_d65da738-e6af-4917-ac29-7e689ef33959","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:05:07][350022680713724][4723 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-23 15:05:07][350022680713724][4723 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-23 15:05:07][350022680713724][4723 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:07:04][352693795868534][1 ms][INFO] === Request start === [2025-08-23 15:07:04][352693795868534][1 ms][DEBUG] START check_scloud [2025-08-23 15:07:04][352693795868534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:07:04][352693795868534][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 12823 19068 24736324 229376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:07:04][352693795868534][317 ms][DEBUG] targetPkg: running [2025-08-23 15:07:04][352693795868534][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 15:07:04][352693795868534][317 ms][DEBUG] START check_boot_completed [2025-08-23 15:07:04][352693795868534][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:07:04][352693795868534][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:07:04][352693795868534][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:07:04][352693795868534][411 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:07:04][352693795868534][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:07:04][352693795868534][411 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:07:04][352693795868534][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795868534\",\"model\":\"SM-S721W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4823\"}'\'' -e'"" [2025-08-23 15:07:04][352693795868534][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:07:04][352693795868534][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795868534\",\"model\":\"SM-S721W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4823\"}'\'' -e'"" [2025-08-23 15:07:12][352693795868534][7862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5586be66-21e4-48ee-93e0-81ae480f2a22","id":"QR_5586be66-21e4-48ee-93e0-81ae480f2a22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:07:12][352693795868534][8018 ms][DEBUG] proc_open done in 7606 ms; code=255; res.len=3343 [2025-08-23 15:07:12][352693795868534][8018 ms][DEBUG] END runCmdUntilRes#1 in 7606 ms [2025-08-23 15:07:12][352693795868534][8018 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:07:18][356380561532959][0 ms][INFO] === Request start === [2025-08-23 15:07:18][356380561532959][1 ms][DEBUG] START check_scloud [2025-08-23 15:07:18][356380561532959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:07:19][356380561532959][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 12823 19068 24917708 240256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:07:19][356380561532959][308 ms][DEBUG] targetPkg: running [2025-08-23 15:07:19][356380561532959][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:07:19][356380561532959][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:07:19][356380561532959][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:07:19][356380561532959][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 15:07:19][356380561532959][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:07:19][356380561532959][447 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:07:19][356380561532959][447 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-23 15:07:19][356380561532959][447 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:07:19][356380561532959][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561532959\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7359\"}'\'' -e'"" [2025-08-23 15:07:19][356380561532959][447 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:07:19][356380561532959][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561532959\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7359\"}'\'' -e'"" [2025-08-23 15:07:22][356380561532959][4150 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:07:22][356380561532959][4150 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-23 15:07:22][356380561532959][4150 ms][WARN] Detected error: Process with pid 12823 either refused to load frida-agent, or terminated during injection [2025-08-23 15:07:22][356380561532959][4150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:07:23][356380561532959][4306 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 15:07:23][356380561532959][4306 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:07:23][356380561532959][4306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:07:23][356380561532959][4431 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:07:23][356380561532959][4431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:07:23][356380561532959][4618 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:07:25][356380561532959][6633 ms][DEBUG] START check_boot_completed [2025-08-23 15:07:25][356380561532959][6633 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:07:25][356380561532959][6680 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:07:25][356380561532959][6680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:07:25][356380561532959][6727 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:07:25][356380561532959][6727 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:07:28][356380561532959][9742 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:07:28][356380561532959][9742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561532959\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7359\"}'\'' -e'"" [2025-08-23 15:07:33][356380561532959][15131 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a19bd728-de79-40a6-949a-f13d2ba136b1","id":"QR_a19bd728-de79-40a6-949a-f13d2ba136b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:07:34][356380561532959][15287 ms][DEBUG] proc_open done in 5546 ms; code=255; res.len=3343 [2025-08-23 15:07:34][356380561532959][15287 ms][DEBUG] END runCmdUntilRes#2 in 5546 ms [2025-08-23 15:07:34][356380561532959][15288 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:09:03][353310802143947][1 ms][INFO] === Request start === [2025-08-23 15:09:03][353310802143947][1 ms][DEBUG] START check_scloud [2025-08-23 15:09:03][353310802143947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:09:03][353310802143947][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 14110 19068 23517460 126872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:09:03][353310802143947][257 ms][DEBUG] targetPkg: running [2025-08-23 15:09:03][353310802143947][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 15:09:03][353310802143947][257 ms][DEBUG] START check_boot_completed [2025-08-23 15:09:03][353310802143947][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:09:03][353310802143947][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:09:03][353310802143947][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:09:03][353310802143947][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:09:03][353310802143947][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:09:03][353310802143947][351 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:09:03][353310802143947][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802143947\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1642\"}'\'' -e'"" [2025-08-23 15:09:03][353310802143947][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:09:03][353310802143947][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802143947\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1642\"}'\'' -e'"" [2025-08-23 15:09:08][353310802143947][4506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbf38301-92f0-47a9-b5ed-f9e02665c152","id":"QR_bbf38301-92f0-47a9-b5ed-f9e02665c152","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:09:08][353310802143947][4662 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 15:09:08][353310802143947][4662 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 15:09:08][353310802143947][4662 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:09:10][354601553044238][0 ms][INFO] === Request start === [2025-08-23 15:09:10][354601553044238][0 ms][DEBUG] START check_scloud [2025-08-23 15:09:10][354601553044238][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:09:11][354601553044238][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 14110 19068 23655772 137460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:09:11][354601553044238][303 ms][DEBUG] targetPkg: running [2025-08-23 15:09:11][354601553044238][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 15:09:11][354601553044238][303 ms][DEBUG] START check_boot_completed [2025-08-23 15:09:11][354601553044238][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:09:11][354601553044238][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:09:11][354601553044238][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:09:11][354601553044238][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:09:11][354601553044238][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:09:11][354601553044238][397 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:09:11][354601553044238][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601553044238\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3439\"}'\'' -e'"" [2025-08-23 15:09:11][354601553044238][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:09:11][354601553044238][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601553044238\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3439\"}'\'' -e'"" [2025-08-23 15:09:15][354601553044238][4208 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5b5a922-689b-437e-b2ca-0f8a6280a695","id":"QR_a5b5a922-689b-437e-b2ca-0f8a6280a695","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:09:15][354601553044238][4364 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-23 15:09:15][354601553044238][4364 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 15:09:15][354601553044238][4364 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:10:05][351406756550574][0 ms][INFO] === Request start === [2025-08-23 15:10:05][351406756550574][1 ms][DEBUG] START check_scloud [2025-08-23 15:10:05][351406756550574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:10:05][351406756550574][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 14110 19068 23800300 149188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:10:05][351406756550574][259 ms][DEBUG] targetPkg: running [2025-08-23 15:10:05][351406756550574][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-23 15:10:05][351406756550574][259 ms][DEBUG] START check_boot_completed [2025-08-23 15:10:05][351406756550574][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:10:05][351406756550574][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:10:05][351406756550574][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:10:05][351406756550574][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:10:05][351406756550574][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:10:05][351406756550574][337 ms][DEBUG] START check_internet [2025-08-23 15:10:05][351406756550574][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.874/202.874/202.874/0.000 ms\n [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] check_internet: online [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] END check_internet in 500 ms [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:10:05][351406756550574][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406756550574\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2726\"}'\'' -e'"" [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:10:05][351406756550574][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406756550574\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2726\"}'\'' -e'"" [2025-08-23 15:10:11][351406756550574][6507 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e95d8f1-6565-4819-8508-23d29a04d70d","id":"QR_9e95d8f1-6565-4819-8508-23d29a04d70d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:10:11][351406756550574][6663 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-23 15:10:11][351406756550574][6663 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-23 15:10:11][351406756550574][6663 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:13:03][351648448129354][1 ms][INFO] === Request start === [2025-08-23 15:13:03][351648448129354][1 ms][DEBUG] START check_scloud [2025-08-23 15:13:03][351648448129354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:13:03][351648448129354][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 14110 19068 23961232 160312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:13:03][351648448129354][305 ms][DEBUG] targetPkg: running [2025-08-23 15:13:03][351648448129354][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 15:13:03][351648448129354][305 ms][DEBUG] START check_boot_completed [2025-08-23 15:13:03][351648448129354][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:13:03][351648448129354][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:13:03][351648448129354][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:13:03][351648448129354][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:13:03][351648448129354][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:13:03][351648448129354][383 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:13:03][351648448129354][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648448129354\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3806\"}'\'' -e'"" [2025-08-23 15:13:03][351648448129354][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:13:03][351648448129354][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648448129354\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3806\"}'\'' -e'"" [2025-08-23 15:13:07][351648448129354][4397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cfae6fe-98a9-4f33-9949-da1f56b7c647","id":"QR_7cfae6fe-98a9-4f33-9949-da1f56b7c647","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:13:08][351648448129354][4553 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-23 15:13:08][351648448129354][4553 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-23 15:13:08][351648448129354][4554 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:14:03][357450473344022][1 ms][INFO] === Request start === [2025-08-23 15:14:03][357450473344022][1 ms][DEBUG] START check_scloud [2025-08-23 15:14:03][357450473344022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:14:03][357450473344022][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 14110 19068 24114036 171340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:14:03][357450473344022][301 ms][DEBUG] targetPkg: running [2025-08-23 15:14:03][357450473344022][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 15:14:03][357450473344022][301 ms][DEBUG] START check_boot_completed [2025-08-23 15:14:03][357450473344022][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:14:03][357450473344022][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:14:03][357450473344022][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:14:03][357450473344022][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:14:03][357450473344022][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:14:03][357450473344022][410 ms][DEBUG] START check_internet [2025-08-23 15:14:03][357450473344022][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:14:04][357450473344022][1005 ms][DEBUG] SU: done in 595 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.285/201.285/201.285/0.000 ms\n [2025-08-23 15:14:04][357450473344022][1005 ms][DEBUG] check_internet: online [2025-08-23 15:14:04][357450473344022][1005 ms][DEBUG] END check_internet in 595 ms [2025-08-23 15:14:04][357450473344022][1006 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:14:04][357450473344022][1006 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473344022\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4097\"}'\'' -e'"" [2025-08-23 15:14:04][357450473344022][1006 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:14:04][357450473344022][1006 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473344022\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4097\"}'\'' -e'"" [2025-08-23 15:14:08][357450473344022][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_272fa472-0d66-4245-8c38-7047c0ecc0e1","id":"QR_272fa472-0d66-4245-8c38-7047c0ecc0e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:14:08][357450473344022][5175 ms][DEBUG] proc_open done in 4169 ms; code=255; res.len=3343 [2025-08-23 15:14:08][357450473344022][5175 ms][DEBUG] END runCmdUntilRes#1 in 4169 ms [2025-08-23 15:14:08][357450473344022][5175 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:14:39][352574702878099][0 ms][INFO] === Request start === [2025-08-23 15:14:39][352574702878099][1 ms][DEBUG] START check_scloud [2025-08-23 15:14:39][352574702878099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:14:39][352574702878099][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 14110 19068 24264792 183536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:14:39][352574702878099][284 ms][DEBUG] targetPkg: running [2025-08-23 15:14:39][352574702878099][284 ms][DEBUG] END check_scloud in 284 ms [2025-08-23 15:14:39][352574702878099][284 ms][DEBUG] START check_boot_completed [2025-08-23 15:14:39][352574702878099][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:14:39][352574702878099][316 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:14:39][352574702878099][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:14:39][352574702878099][378 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:14:39][352574702878099][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:14:39][352574702878099][378 ms][DEBUG] START check_internet [2025-08-23 15:14:39][352574702878099][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:14:39][352574702878099][722 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.537/221.537/221.537/0.000 ms\n [2025-08-23 15:14:39][352574702878099][722 ms][DEBUG] check_internet: online [2025-08-23 15:14:39][352574702878099][722 ms][DEBUG] END check_internet in 344 ms [2025-08-23 15:14:39][352574702878099][722 ms][DEBUG] rawBody.length=1150 [2025-08-23 15:14:39][352574702878099][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352574702878099\",\"model\":\"SM-S536DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1853\"}'\'' -e'"" [2025-08-23 15:14:39][352574702878099][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:14:39][352574702878099][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352574702878099\",\"model\":\"SM-S536DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1853\"}'\'' -e'"" [2025-08-23 15:14:46][352574702878099][7502 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03335a05-a6aa-48f9-8732-e17fec20a776","id":"QR_03335a05-a6aa-48f9-8732-e17fec20a776","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:14:46][352574702878099][7658 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-08-23 15:14:46][352574702878099][7658 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-23 15:14:46][352574702878099][7658 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:16:04][355204631725230][1 ms][INFO] === Request start === [2025-08-23 15:16:04][355204631725230][1 ms][DEBUG] START check_scloud [2025-08-23 15:16:04][355204631725230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:16:04][355204631725230][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 14110 19068 24427836 194628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:16:04][355204631725230][306 ms][DEBUG] targetPkg: running [2025-08-23 15:16:04][355204631725230][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 15:16:04][355204631725230][306 ms][DEBUG] START check_boot_completed [2025-08-23 15:16:04][355204631725230][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:16:04][355204631725230][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:16:04][355204631725230][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:16:04][355204631725230][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:16:04][355204631725230][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:16:04][355204631725230][384 ms][DEBUG] START check_internet [2025-08-23 15:16:04][355204631725230][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.391/202.391/202.391/0.000 ms\n [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] check_internet: online [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] END check_internet in 500 ms [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:16:05][355204631725230][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355204631725230\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3633\"}'\'' -e'"" [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:16:05][355204631725230][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355204631725230\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3633\"}'\'' -e'"" [2025-08-23 15:16:11][355204631725230][7476 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8554c867-82d0-442f-9edf-b9da0e9aa786","id":"QR_8554c867-82d0-442f-9edf-b9da0e9aa786","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:16:12][355204631725230][7632 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3343 [2025-08-23 15:16:12][355204631725230][7632 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-23 15:16:12][355204631725230][7632 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:16:43][350792529627232][0 ms][INFO] === Request start === [2025-08-23 15:16:43][350792529627232][1 ms][DEBUG] START check_scloud [2025-08-23 15:16:43][350792529627232][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:16:44][350792529627232][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 14110 19068 24537504 206512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:16:44][350792529627232][268 ms][DEBUG] targetPkg: running [2025-08-23 15:16:44][350792529627232][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 15:16:44][350792529627232][268 ms][DEBUG] START check_boot_completed [2025-08-23 15:16:44][350792529627232][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:16:44][350792529627232][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:16:44][350792529627232][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:16:44][350792529627232][347 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:16:44][350792529627232][347 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 15:16:44][350792529627232][347 ms][DEBUG] START check_internet [2025-08-23 15:16:44][350792529627232][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.931/184.931/184.931/0.000 ms\n [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] check_internet: online [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] END check_internet in 296 ms [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:16:44][350792529627232][643 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4749\"}'\'' -e'"" [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:16:44][350792529627232][643 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4749\"}'\'' -e'"" [2025-08-23 15:16:48][350792529627232][4454 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:16:48][350792529627232][4610 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=107 [2025-08-23 15:16:48][350792529627232][4611 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-23 15:16:48][350792529627232][4611 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:16:48][][0 ms][INFO] === Request start === [2025-08-23 15:16:48][][0 ms][DEBUG] START check_scloud [2025-08-23 15:16:48][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:16:49][][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 14110 19068 24669864 217148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:16:49][][288 ms][DEBUG] targetPkg: running [2025-08-23 15:16:49][][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 15:16:49][][288 ms][DEBUG] START check_boot_completed [2025-08-23 15:16:49][][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:16:49][][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:16:49][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:16:49][][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:16:49][][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:16:49][][397 ms][DEBUG] START check_internet [2025-08-23 15:16:49][][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:16:49][][710 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.837/154.837/154.837/0.000 ms\n [2025-08-23 15:16:49][][710 ms][DEBUG] check_internet: online [2025-08-23 15:16:49][][710 ms][DEBUG] END check_internet in 312 ms [2025-08-23 15:16:49][][710 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:16:49][][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50A3BRD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5842\"}'\'' -e'"" [2025-08-23 15:16:49][][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:16:49][][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50A3BRD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5842\"}'\'' -e'"" [2025-08-23 15:16:52][][4193 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:16:53][][4349 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-23 15:16:53][][4349 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-23 15:16:53][][4349 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:16:55][350792529627232][0 ms][INFO] === Request start === [2025-08-23 15:16:55][350792529627232][1 ms][DEBUG] START check_scloud [2025-08-23 15:16:55][350792529627232][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:16:55][350792529627232][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 14110 19068 24816564 229272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:16:55][350792529627232][312 ms][DEBUG] targetPkg: running [2025-08-23 15:16:55][350792529627232][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 15:16:55][350792529627232][312 ms][DEBUG] START check_boot_completed [2025-08-23 15:16:55][350792529627232][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:16:55][350792529627232][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:16:55][350792529627232][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:16:55][350792529627232][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:16:55][350792529627232][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:16:55][350792529627232][421 ms][DEBUG] START check_internet [2025-08-23 15:16:55][350792529627232][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.018/143.018/143.018/0.000 ms\n [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] check_internet: online [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] END check_internet in 250 ms [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:16:55][350792529627232][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8248\"}'\'' -e'"" [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:16:55][350792529627232][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8248\"}'\'' -e'"" [2025-08-23 15:17:02][350792529627232][7700 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4fe83b7-af1e-41a4-8b9e-d8af909155bf","id":"QR_b4fe83b7-af1e-41a4-8b9e-d8af909155bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:17:02][350792529627232][7857 ms][DEBUG] proc_open done in 7186 ms; code=255; res.len=3343 [2025-08-23 15:17:02][350792529627232][7857 ms][DEBUG] END runCmdUntilRes#1 in 7186 ms [2025-08-23 15:17:02][350792529627232][7857 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:17:30][350792529627232][0 ms][INFO] === Request start === [2025-08-23 15:17:30][350792529627232][1 ms][DEBUG] START check_scloud [2025-08-23 15:17:30][350792529627232][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:17:30][350792529627232][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 14110 19068 24939600 240664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:17:30][350792529627232][307 ms][DEBUG] targetPkg: running [2025-08-23 15:17:30][350792529627232][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:17:30][350792529627232][307 ms][DEBUG] START check_boot_completed [2025-08-23 15:17:30][350792529627232][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:17:30][350792529627232][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:17:30][350792529627232][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:17:30][350792529627232][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:17:30][350792529627232][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:17:30][350792529627232][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:17:30][350792529627232][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-08-23 15:17:30][350792529627232][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:17:30][350792529627232][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-08-23 15:17:34][350792529627232][4072 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:17:34][350792529627232][4072 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-23 15:17:34][350792529627232][4072 ms][WARN] Detected error: Process with pid 14110 either refused to load frida-agent, or terminated during injection [2025-08-23 15:17:34][350792529627232][4072 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:17:34][350792529627232][4213 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 15:17:34][350792529627232][4213 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:17:34][350792529627232][4213 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:17:34][350792529627232][4338 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:17:34][350792529627232][4338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:17:35][350792529627232][4478 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:17:37][350792529627232][6493 ms][DEBUG] START check_boot_completed [2025-08-23 15:17:37][350792529627232][6493 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:17:37][350792529627232][6540 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:17:37][350792529627232][6540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:17:37][350792529627232][6587 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:17:37][350792529627232][6587 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:17:40][350792529627232][9602 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:17:40][350792529627232][9602 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-08-23 15:17:43][350792529627232][13132 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:17:43][350792529627232][13288 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=107 [2025-08-23 15:17:43][350792529627232][13289 ms][DEBUG] END runCmdUntilRes#2 in 3687 ms [2025-08-23 15:17:43][350792529627232][13289 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:17:44][][0 ms][INFO] === Request start === [2025-08-23 15:17:44][][1 ms][DEBUG] START check_scloud [2025-08-23 15:17:44][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:17:44][][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 15418 19068 23627292 123720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:17:44][][246 ms][DEBUG] targetPkg: running [2025-08-23 15:17:44][][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-23 15:17:44][][246 ms][DEBUG] START check_boot_completed [2025-08-23 15:17:44][][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:17:44][][293 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:17:44][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:17:44][][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:17:44][][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:17:44][][355 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:17:44][][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50A3BRD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5038\"}'\'' -e'"" [2025-08-23 15:17:44][][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:17:44][][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50A3BRD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5038\"}'\'' -e'"" [2025-08-23 15:17:48][][3948 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:17:48][][4104 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=107 [2025-08-23 15:17:48][][4104 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-23 15:17:48][][4104 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:17:50][350792529627232][0 ms][INFO] === Request start === [2025-08-23 15:17:50][350792529627232][1 ms][DEBUG] START check_scloud [2025-08-23 15:17:50][350792529627232][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:17:51][350792529627232][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 15418 19068 23792488 137888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:17:51][350792529627232][251 ms][DEBUG] targetPkg: running [2025-08-23 15:17:51][350792529627232][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-23 15:17:51][350792529627232][251 ms][DEBUG] START check_boot_completed [2025-08-23 15:17:51][350792529627232][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:17:51][350792529627232][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:17:51][350792529627232][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:17:51][350792529627232][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:17:51][350792529627232][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:17:51][350792529627232][360 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:17:51][350792529627232][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4529\"}'\'' -e'"" [2025-08-23 15:17:51][350792529627232][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:17:51][350792529627232][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529627232\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4529\"}'\'' -e'"" [2025-08-23 15:17:56][350792529627232][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e372f4fc-ee2d-4a43-8e0d-6380bc4a0c62","id":"QR_e372f4fc-ee2d-4a43-8e0d-6380bc4a0c62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:17:56][350792529627232][6124 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-08-23 15:17:56][350792529627232][6125 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-08-23 15:17:56][350792529627232][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:18:02][350110410794393][0 ms][INFO] === Request start === [2025-08-23 15:18:02][350110410794393][1 ms][DEBUG] START check_scloud [2025-08-23 15:18:02][350110410794393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:18:02][350110410794393][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 15418 19068 23943116 149020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:18:02][350110410794393][302 ms][DEBUG] targetPkg: running [2025-08-23 15:18:02][350110410794393][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 15:18:02][350110410794393][303 ms][DEBUG] START check_boot_completed [2025-08-23 15:18:02][350110410794393][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:18:02][350110410794393][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:18:02][350110410794393][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:18:02][350110410794393][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:18:02][350110410794393][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:18:02][350110410794393][412 ms][DEBUG] START check_internet [2025-08-23 15:18:02][350110410794393][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:18:03][350110410794393][786 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.486/249.486/249.486/0.000 ms\n [2025-08-23 15:18:03][350110410794393][786 ms][DEBUG] check_internet: online [2025-08-23 15:18:03][350110410794393][786 ms][DEBUG] END check_internet in 374 ms [2025-08-23 15:18:03][350110410794393][786 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:18:03][350110410794393][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110410794393\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5914\"}'\'' -e'"" [2025-08-23 15:18:03][350110410794393][786 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:18:03][350110410794393][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110410794393\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5914\"}'\'' -e'"" [2025-08-23 15:18:07][350110410794393][4770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1e8a99f-e1a9-436e-89b0-f8a6c469db43","id":"QR_b1e8a99f-e1a9-436e-89b0-f8a6c469db43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:18:07][350110410794393][4926 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-23 15:18:07][350110410794393][4926 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-23 15:18:07][350110410794393][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:18:11][352749382522288][1 ms][INFO] === Request start === [2025-08-23 15:18:11][352749382522288][1 ms][DEBUG] START check_scloud [2025-08-23 15:18:11][352749382522288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:18:11][352749382522288][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 15418 19068 24036224 160224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:18:11][352749382522288][248 ms][DEBUG] targetPkg: running [2025-08-23 15:18:11][352749382522288][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-23 15:18:11][352749382522288][248 ms][DEBUG] START check_boot_completed [2025-08-23 15:18:11][352749382522288][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:18:11][352749382522288][279 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:18:11][352749382522288][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:18:11][352749382522288][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:18:11][352749382522288][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:18:11][352749382522288][326 ms][DEBUG] START check_internet [2025-08-23 15:18:11][352749382522288][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.892/242.892/242.892/0.000 ms\n [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] check_internet: online [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] END check_internet in 343 ms [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:18:12][352749382522288][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382522288\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4786\"}'\'' -e'"" [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:18:12][352749382522288][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382522288\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4786\"}'\'' -e'"" [2025-08-23 15:18:18][352749382522288][6902 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e10a9c4-f368-4a40-afbd-cb6f6dd10678","id":"QR_2e10a9c4-f368-4a40-afbd-cb6f6dd10678","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:18:18][352749382522288][7059 ms][DEBUG] proc_open done in 6389 ms; code=255; res.len=3343 [2025-08-23 15:18:18][352749382522288][7059 ms][DEBUG] END runCmdUntilRes#1 in 6389 ms [2025-08-23 15:18:18][352749382522288][7059 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:18:24][351681596477085][1 ms][INFO] === Request start === [2025-08-23 15:18:24][351681596477085][1 ms][DEBUG] START check_scloud [2025-08-23 15:18:24][351681596477085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:18:24][351681596477085][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 15418 19068 24150080 172252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:18:24][351681596477085][301 ms][DEBUG] targetPkg: running [2025-08-23 15:18:24][351681596477085][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 15:18:24][351681596477085][301 ms][DEBUG] START check_boot_completed [2025-08-23 15:18:24][351681596477085][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:18:24][351681596477085][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:18:24][351681596477085][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:18:24][351681596477085][380 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:18:24][351681596477085][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 15:18:24][351681596477085][380 ms][DEBUG] START check_internet [2025-08-23 15:18:24][351681596477085][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.412/218.412/218.412/0.000 ms\n [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] check_internet: online [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] END check_internet in 343 ms [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:18:25][351681596477085][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681596477085\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8640\"}'\'' -e'"" [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:18:25][351681596477085][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681596477085\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8640\"}'\'' -e'"" [2025-08-23 15:18:28][351681596477085][4425 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0fbdcf0-9734-4072-b5d9-0ff844d4fc19","id":"QR_d0fbdcf0-9734-4072-b5d9-0ff844d4fc19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:18:28][351681596477085][4581 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 15:18:28][351681596477085][4581 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 15:18:28][351681596477085][4581 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:19:03][357040733962950][0 ms][INFO] === Request start === [2025-08-23 15:19:03][357040733962950][1 ms][DEBUG] START check_scloud [2025-08-23 15:19:03][357040733962950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:19:03][357040733962950][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 15418 19068 24274176 182888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:19:03][357040733962950][320 ms][DEBUG] targetPkg: running [2025-08-23 15:19:03][357040733962950][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 15:19:03][357040733962950][320 ms][DEBUG] START check_boot_completed [2025-08-23 15:19:03][357040733962950][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:19:04][357040733962950][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:19:04][357040733962950][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:19:04][357040733962950][460 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:19:04][357040733962950][461 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 15:19:04][357040733962950][461 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:19:04][357040733962950][461 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040733962950\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-08-23 15:19:04][357040733962950][461 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:19:04][357040733962950][461 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040733962950\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-08-23 15:19:08][357040733962950][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41e0825a-fd34-4dd9-92a3-b8d4f9fd7ce0","id":"QR_41e0825a-fd34-4dd9-92a3-b8d4f9fd7ce0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:19:08][357040733962950][4647 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 15:19:08][357040733962950][4647 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 15:19:08][357040733962950][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:19:12][350545461990814][0 ms][INFO] === Request start === [2025-08-23 15:19:12][350545461990814][1 ms][DEBUG] START check_scloud [2025-08-23 15:19:12][350545461990814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:19:12][350545461990814][280 ms][DEBUG] SU: done in 280 ms; outu0_a118 15418 19068 24412552 194620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:19:12][350545461990814][280 ms][DEBUG] targetPkg: running [2025-08-23 15:19:12][350545461990814][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-23 15:19:12][350545461990814][281 ms][DEBUG] START check_boot_completed [2025-08-23 15:19:12][350545461990814][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:19:12][350545461990814][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:19:12][350545461990814][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:19:12][350545461990814][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:19:12][350545461990814][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:19:12][350545461990814][390 ms][DEBUG] rawBody.length=1158 [2025-08-23 15:19:12][350545461990814][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461990814\",\"model\":\"SM-T970\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52NB0F1NTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8415\"}'\'' -e'"" [2025-08-23 15:19:12][350545461990814][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:19:12][350545461990814][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461990814\",\"model\":\"SM-T970\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52NB0F1NTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8415\"}'\'' -e'"" [2025-08-23 15:19:16][350545461990814][4217 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1e15c9a-7e57-4394-9792-3b92f9281309","id":"QR_c1e15c9a-7e57-4394-9792-3b92f9281309","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:19:16][350545461990814][4373 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 15:19:16][350545461990814][4373 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 15:19:16][350545461990814][4373 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:20:03][354747955829658][0 ms][INFO] === Request start === [2025-08-23 15:20:03][354747955829658][1 ms][DEBUG] START check_scloud [2025-08-23 15:20:03][354747955829658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:20:03][354747955829658][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 15418 19068 24519036 205728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:20:03][354747955829658][311 ms][DEBUG] targetPkg: running [2025-08-23 15:20:03][354747955829658][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 15:20:03][354747955829658][311 ms][DEBUG] START check_boot_completed [2025-08-23 15:20:03][354747955829658][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:20:03][354747955829658][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:20:03][354747955829658][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:20:03][354747955829658][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:20:03][354747955829658][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:20:03][354747955829658][405 ms][DEBUG] START check_internet [2025-08-23 15:20:03][354747955829658][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:20:04][354747955829658][842 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.987/199.987/199.987/0.000 ms\n [2025-08-23 15:20:04][354747955829658][842 ms][DEBUG] check_internet: online [2025-08-23 15:20:04][354747955829658][842 ms][DEBUG] END check_internet in 438 ms [2025-08-23 15:20:04][354747955829658][842 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:20:04][354747955829658][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955829658\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-23 15:20:04][354747955829658][843 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:20:04][354747955829658][843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955829658\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-23 15:20:08][354747955829658][4888 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f42fcfbc-41ff-4da2-a849-5bac1de43edd","id":"QR_f42fcfbc-41ff-4da2-a849-5bac1de43edd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:20:08][354747955829658][5044 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 15:20:08][354747955829658][5044 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-23 15:20:08][354747955829658][5044 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:21:29][358438736966698][0 ms][INFO] === Request start === [2025-08-23 15:21:29][358438736966698][0 ms][DEBUG] START check_scloud [2025-08-23 15:21:29][358438736966698][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:21:29][358438736966698][281 ms][DEBUG] SU: done in 281 ms; outu0_a118 15418 19068 24657504 217652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:21:29][358438736966698][282 ms][DEBUG] targetPkg: running [2025-08-23 15:21:29][358438736966698][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-23 15:21:29][358438736966698][282 ms][DEBUG] START check_boot_completed [2025-08-23 15:21:29][358438736966698][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:21:29][358438736966698][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:21:29][358438736966698][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:21:29][358438736966698][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:21:29][358438736966698][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:21:29][358438736966698][375 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:21:29][358438736966698][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6894\"}'\'' -e'"" [2025-08-23 15:21:29][358438736966698][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:21:29][358438736966698][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6894\"}'\'' -e'"" [2025-08-23 15:21:33][358438736966698][4249 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:21:33][358438736966698][4406 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=107 [2025-08-23 15:21:33][358438736966698][4406 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 15:21:33][358438736966698][4406 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:21:33][][0 ms][INFO] === Request start === [2025-08-23 15:21:33][][1 ms][DEBUG] START check_scloud [2025-08-23 15:21:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:21:34][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 15418 19068 24816488 228708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:21:34][][318 ms][DEBUG] targetPkg: running [2025-08-23 15:21:34][][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 15:21:34][][318 ms][DEBUG] START check_boot_completed [2025-08-23 15:21:34][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:21:34][][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:21:34][][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:21:34][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:21:34][][397 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 15:21:34][][397 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:21:34][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB04HWSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-08-23 15:21:34][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:21:34][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB04HWSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-08-23 15:21:37][][3817 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:21:37][][3974 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-23 15:21:37][][3974 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-23 15:21:37][][3974 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:21:39][358438736966698][0 ms][INFO] === Request start === [2025-08-23 15:21:39][358438736966698][1 ms][DEBUG] START check_scloud [2025-08-23 15:21:39][358438736966698][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:21:40][358438736966698][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 15418 19068 24942704 240564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:21:40][358438736966698][318 ms][DEBUG] targetPkg: running [2025-08-23 15:21:40][358438736966698][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 15:21:40][358438736966698][318 ms][DEBUG] START check_boot_completed [2025-08-23 15:21:40][358438736966698][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:21:40][358438736966698][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:21:40][358438736966698][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:21:40][358438736966698][443 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 15:21:40][358438736966698][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 15:21:40][358438736966698][443 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:21:40][358438736966698][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9924\"}'\'' -e'"" [2025-08-23 15:21:40][358438736966698][443 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:21:40][358438736966698][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9924\"}'\'' -e'"" [2025-08-23 15:21:44][358438736966698][4099 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:21:44][358438736966698][4099 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 15:21:44][358438736966698][4099 ms][WARN] Detected error: Process with pid 15418 either refused to load frida-agent, or terminated during injection [2025-08-23 15:21:44][358438736966698][4099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:21:44][358438736966698][4255 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 15:21:44][358438736966698][4255 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:21:44][358438736966698][4255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:21:44][358438736966698][4395 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 15:21:44][358438736966698][4395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:21:44][358438736966698][4552 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:21:46][358438736966698][6566 ms][DEBUG] START check_boot_completed [2025-08-23 15:21:46][358438736966698][6567 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:21:46][358438736966698][6614 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:21:46][358438736966698][6614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:21:46][358438736966698][6707 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:21:46][358438736966698][6707 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 15:21:49][358438736966698][9722 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:21:49][358438736966698][9722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9924\"}'\'' -e'"" [2025-08-23 15:21:54][358438736966698][14908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_118489f8-2692-4580-9a7e-3be633df1591","id":"QR_118489f8-2692-4580-9a7e-3be633df1591","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:21:54][358438736966698][15065 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-23 15:21:54][358438736966698][15065 ms][DEBUG] END runCmdUntilRes#2 in 5343 ms [2025-08-23 15:21:54][358438736966698][15065 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:22:03][351477972033265][0 ms][INFO] === Request start === [2025-08-23 15:22:03][351477972033265][1 ms][DEBUG] START check_scloud [2025-08-23 15:22:03][351477972033265][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:22:03][351477972033265][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 16596 19068 23697540 126576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:22:03][351477972033265][273 ms][DEBUG] targetPkg: running [2025-08-23 15:22:03][351477972033265][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 15:22:03][351477972033265][273 ms][DEBUG] START check_boot_completed [2025-08-23 15:22:03][351477972033265][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:22:03][351477972033265][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:22:03][351477972033265][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:22:03][351477972033265][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:22:03][351477972033265][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:22:03][351477972033265][366 ms][DEBUG] START check_internet [2025-08-23 15:22:03][351477972033265][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.472/168.472/168.472/0.000 ms\n [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] check_internet: online [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] END check_internet in 265 ms [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:22:04][351477972033265][632 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972033265\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5561\"}'\'' -e'"" [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:22:04][351477972033265][632 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972033265\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5561\"}'\'' -e'"" [2025-08-23 15:22:07][351477972033265][4506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e559519a-c09e-4c47-a9b4-fb121d40d8eb","id":"QR_e559519a-c09e-4c47-a9b4-fb121d40d8eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:22:08][351477972033265][4662 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 15:22:08][351477972033265][4662 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 15:22:08][351477972033265][4662 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:22:10][350300272287954][0 ms][INFO] === Request start === [2025-08-23 15:22:10][350300272287954][0 ms][DEBUG] START check_scloud [2025-08-23 15:22:10][350300272287954][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:22:11][350300272287954][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 16596 19068 23827752 137452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:22:11][350300272287954][292 ms][DEBUG] targetPkg: running [2025-08-23 15:22:11][350300272287954][292 ms][DEBUG] END check_scloud in 292 ms [2025-08-23 15:22:11][350300272287954][292 ms][DEBUG] START check_boot_completed [2025-08-23 15:22:11][350300272287954][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:22:11][350300272287954][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:22:11][350300272287954][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:22:11][350300272287954][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:22:11][350300272287954][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:22:11][350300272287954][370 ms][DEBUG] START check_internet [2025-08-23 15:22:11][350300272287954][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.459/172.459/172.459/0.000 ms\n [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] check_internet: online [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] END check_internet in 297 ms [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:22:11][350300272287954][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272287954\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7108\"}'\'' -e'"" [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:22:11][350300272287954][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272287954\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7108\"}'\'' -e'"" [2025-08-23 15:22:15][350300272287954][4385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0185783b-1b4c-4826-906f-0c785af0c6ed","id":"QR_0185783b-1b4c-4826-906f-0c785af0c6ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:22:15][350300272287954][4541 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-23 15:22:15][350300272287954][4541 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 15:22:15][350300272287954][4541 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:22:19][354091573304061][0 ms][INFO] === Request start === [2025-08-23 15:22:19][354091573304061][1 ms][DEBUG] START check_scloud [2025-08-23 15:22:19][354091573304061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:22:19][354091573304061][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 16596 19068 23883840 149352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:22:19][354091573304061][310 ms][DEBUG] targetPkg: running [2025-08-23 15:22:19][354091573304061][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:22:19][354091573304061][310 ms][DEBUG] START check_boot_completed [2025-08-23 15:22:19][354091573304061][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:22:19][354091573304061][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:22:19][354091573304061][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:22:19][354091573304061][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:22:19][354091573304061][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:22:19][354091573304061][419 ms][DEBUG] START check_internet [2025-08-23 15:22:19][354091573304061][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:22:20][354091573304061][778 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.490/250.490/250.490/0.000 ms\n [2025-08-23 15:22:20][354091573304061][778 ms][DEBUG] check_internet: online [2025-08-23 15:22:20][354091573304061][778 ms][DEBUG] END check_internet in 360 ms [2025-08-23 15:22:20][354091573304061][778 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:22:20][354091573304061][778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573304061\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4325\"}'\'' -e'"" [2025-08-23 15:22:20][354091573304061][779 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:22:20][354091573304061][779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573304061\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4325\"}'\'' -e'"" [2025-08-23 15:22:25][354091573304061][6136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4df677aa-72de-4a6a-aec0-ff67c4faa85c","id":"QR_4df677aa-72de-4a6a-aec0-ff67c4faa85c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:22:25][354091573304061][6292 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 15:22:25][354091573304061][6292 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 15:22:25][354091573304061][6292 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:23:03][359944697376743][0 ms][INFO] === Request start === [2025-08-23 15:23:03][359944697376743][1 ms][DEBUG] START check_scloud [2025-08-23 15:23:03][359944697376743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:23:03][359944697376743][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 16596 19068 23977052 160548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:23:03][359944697376743][308 ms][DEBUG] targetPkg: running [2025-08-23 15:23:03][359944697376743][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:23:03][359944697376743][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:23:03][359944697376743][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:23:03][359944697376743][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:23:03][359944697376743][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:23:03][359944697376743][403 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 15:23:03][359944697376743][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 15:23:03][359944697376743][403 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:23:03][359944697376743][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697376743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6405\"}'\'' -e'"" [2025-08-23 15:23:03][359944697376743][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:23:03][359944697376743][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697376743\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6405\"}'\'' -e'"" [2025-08-23 15:23:07][359944697376743][4572 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3516527-14f3-46ab-b5fc-a2e6bfe3e90b","id":"QR_d3516527-14f3-46ab-b5fc-a2e6bfe3e90b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:23:07][359944697376743][4729 ms][DEBUG] proc_open done in 4325 ms; code=255; res.len=3343 [2025-08-23 15:23:07][359944697376743][4729 ms][DEBUG] END runCmdUntilRes#1 in 4325 ms [2025-08-23 15:23:07][359944697376743][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:24:04][358335620619872][1 ms][INFO] === Request start === [2025-08-23 15:24:04][358335620619872][1 ms][DEBUG] START check_scloud [2025-08-23 15:24:04][358335620619872][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:24:04][358335620619872][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 16596 19068 24085108 172600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:24:04][358335620619872][291 ms][DEBUG] targetPkg: running [2025-08-23 15:24:04][358335620619872][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-23 15:24:04][358335620619872][291 ms][DEBUG] START check_boot_completed [2025-08-23 15:24:04][358335620619872][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:24:04][358335620619872][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:24:04][358335620619872][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:24:05][358335620619872][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:24:05][358335620619872][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:24:05][358335620619872][400 ms][DEBUG] START check_internet [2025-08-23 15:24:05][358335620619872][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:24:05][358335620619872][931 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.349/202.349/202.349/0.000 ms\n [2025-08-23 15:24:05][358335620619872][932 ms][DEBUG] check_internet: online [2025-08-23 15:24:05][358335620619872][932 ms][DEBUG] END check_internet in 531 ms [2025-08-23 15:24:05][358335620619872][932 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:24:05][358335620619872][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358335620619872\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6028\"}'\'' -e'"" [2025-08-23 15:24:05][358335620619872][932 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:24:05][358335620619872][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358335620619872\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6028\"}'\'' -e'"" [2025-08-23 15:24:10][358335620619872][6086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d46dc91-af1c-4f89-884d-5eb68494d778","id":"QR_6d46dc91-af1c-4f89-884d-5eb68494d778","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:24:10][358335620619872][6242 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-23 15:24:10][358335620619872][6242 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-23 15:24:10][358335620619872][6242 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:24:16][352001411357694][0 ms][INFO] === Request start === [2025-08-23 15:24:16][352001411357694][1 ms][DEBUG] START check_scloud [2025-08-23 15:24:16][352001411357694][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:24:16][352001411357694][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 16596 19068 24242044 183428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:24:16][352001411357694][306 ms][DEBUG] targetPkg: running [2025-08-23 15:24:16][352001411357694][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 15:24:16][352001411357694][307 ms][DEBUG] START check_boot_completed [2025-08-23 15:24:16][352001411357694][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:24:16][352001411357694][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:24:16][352001411357694][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:24:16][352001411357694][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:24:16][352001411357694][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:24:16][352001411357694][416 ms][DEBUG] START check_internet [2025-08-23 15:24:16][352001411357694][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.766/162.766/162.766/0.000 ms\n [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] check_internet: online [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:24:16][352001411357694][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001411357694\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3691\"}'\'' -e'"" [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:24:16][352001411357694][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001411357694\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3691\"}'\'' -e'"" [2025-08-23 15:24:20][352001411357694][4680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f71bdb2-d299-413d-9d98-1812adc80736","id":"QR_5f71bdb2-d299-413d-9d98-1812adc80736","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:24:21][352001411357694][4836 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 15:24:21][352001411357694][4836 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 15:24:21][352001411357694][4836 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:24:23][350178733593354][0 ms][INFO] === Request start === [2025-08-23 15:24:23][350178733593354][1 ms][DEBUG] START check_scloud [2025-08-23 15:24:23][350178733593354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:24:23][350178733593354][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 16596 19068 24402884 195088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:24:23][350178733593354][283 ms][DEBUG] targetPkg: running [2025-08-23 15:24:23][350178733593354][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-23 15:24:23][350178733593354][283 ms][DEBUG] START check_boot_completed [2025-08-23 15:24:23][350178733593354][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:24:23][350178733593354][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:24:23][350178733593354][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:24:23][350178733593354][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:24:23][350178733593354][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:24:23][350178733593354][392 ms][DEBUG] START check_internet [2025-08-23 15:24:23][350178733593354][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:24:24][350178733593354][705 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.691/190.691/190.691/0.000 ms\n [2025-08-23 15:24:24][350178733593354][705 ms][DEBUG] check_internet: online [2025-08-23 15:24:24][350178733593354][706 ms][DEBUG] END check_internet in 313 ms [2025-08-23 15:24:24][350178733593354][706 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:24:24][350178733593354][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733593354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7031\"}'\'' -e'"" [2025-08-23 15:24:24][350178733593354][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:24:24][350178733593354][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733593354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7031\"}'\'' -e'"" [2025-08-23 15:24:28][350178733593354][4657 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_348be79d-7e22-4d9a-a638-d227d282f60e","id":"QR_348be79d-7e22-4d9a-a638-d227d282f60e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:24:28][350178733593354][4813 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 15:24:28][350178733593354][4813 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 15:24:28][350178733593354][4814 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:25:04][351283762472303][0 ms][INFO] === Request start === [2025-08-23 15:25:04][351283762472303][1 ms][DEBUG] START check_scloud [2025-08-23 15:25:04][351283762472303][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:25:05][351283762472303][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 16596 19068 24510432 206272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:25:05][351283762472303][305 ms][DEBUG] targetPkg: running [2025-08-23 15:25:05][351283762472303][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 15:25:05][351283762472303][305 ms][DEBUG] START check_boot_completed [2025-08-23 15:25:05][351283762472303][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:25:05][351283762472303][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:25:05][351283762472303][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:25:05][351283762472303][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:25:05][351283762472303][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:25:05][351283762472303][399 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:25:05][351283762472303][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283762472303\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7115\"}'\'' -e'"" [2025-08-23 15:25:05][351283762472303][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:25:05][351283762472303][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283762472303\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7115\"}'\'' -e'"" [2025-08-23 15:25:10][351283762472303][5428 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5844907-0d11-4e92-959d-b564abe20fab","id":"QR_d5844907-0d11-4e92-959d-b564abe20fab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:25:10][351283762472303][5585 ms][DEBUG] proc_open done in 5185 ms; code=255; res.len=3343 [2025-08-23 15:25:10][351283762472303][5585 ms][DEBUG] END runCmdUntilRes#1 in 5185 ms [2025-08-23 15:25:10][351283762472303][5585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:25:17][350011601783882][0 ms][INFO] === Request start === [2025-08-23 15:25:17][350011601783882][1 ms][DEBUG] START check_scloud [2025-08-23 15:25:17][350011601783882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:25:17][350011601783882][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 16596 19068 24651880 217296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:25:17][350011601783882][292 ms][DEBUG] targetPkg: running [2025-08-23 15:25:17][350011601783882][292 ms][DEBUG] END check_scloud in 292 ms [2025-08-23 15:25:17][350011601783882][292 ms][DEBUG] START check_boot_completed [2025-08-23 15:25:17][350011601783882][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:25:17][350011601783882][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:25:17][350011601783882][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:25:17][350011601783882][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:25:17][350011601783882][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:25:17][350011601783882][386 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:25:17][350011601783882][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011601783882\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-23 15:25:17][350011601783882][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:25:17][350011601783882][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011601783882\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-23 15:25:24][350011601783882][7040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79525a7d-43d6-4646-a0d6-450546778de1","id":"QR_79525a7d-43d6-4646-a0d6-450546778de1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:25:24][350011601783882][7197 ms][DEBUG] proc_open done in 6811 ms; code=255; res.len=3343 [2025-08-23 15:25:24][350011601783882][7197 ms][DEBUG] END runCmdUntilRes#1 in 6811 ms [2025-08-23 15:25:24][350011601783882][7197 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:25:29][350900921695737][1 ms][INFO] === Request start === [2025-08-23 15:25:29][350900921695737][1 ms][DEBUG] START check_scloud [2025-08-23 15:25:29][350900921695737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:25:29][350900921695737][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 16596 19068 24800460 229128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:25:29][350900921695737][252 ms][DEBUG] targetPkg: running [2025-08-23 15:25:29][350900921695737][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-23 15:25:29][350900921695737][252 ms][DEBUG] START check_boot_completed [2025-08-23 15:25:29][350900921695737][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:25:30][350900921695737][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:25:30][350900921695737][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:25:30][350900921695737][347 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:25:30][350900921695737][347 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 15:25:30][350900921695737][347 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:25:30][350900921695737][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921695737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7274\"}'\'' -e'"" [2025-08-23 15:25:30][350900921695737][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:25:30][350900921695737][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921695737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7274\"}'\'' -e'"" [2025-08-23 15:25:34][350900921695737][4516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4c9c747-4fcd-4b67-bc32-c7c32ddc122d","id":"QR_f4c9c747-4fcd-4b67-bc32-c7c32ddc122d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:25:34][350900921695737][4672 ms][DEBUG] proc_open done in 4325 ms; code=255; res.len=3343 [2025-08-23 15:25:34][350900921695737][4672 ms][DEBUG] END runCmdUntilRes#1 in 4325 ms [2025-08-23 15:25:34][350900921695737][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:26:03][351123966322484][0 ms][INFO] === Request start === [2025-08-23 15:26:03][351123966322484][1 ms][DEBUG] START check_scloud [2025-08-23 15:26:03][351123966322484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:26:03][351123966322484][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 16596 19068 24924428 241096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:26:03][351123966322484][273 ms][DEBUG] targetPkg: running [2025-08-23 15:26:03][351123966322484][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 15:26:03][351123966322484][273 ms][DEBUG] START check_boot_completed [2025-08-23 15:26:03][351123966322484][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:26:03][351123966322484][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:26:03][351123966322484][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:26:03][351123966322484][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:26:03][351123966322484][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:26:03][351123966322484][366 ms][DEBUG] START check_internet [2025-08-23 15:26:03][351123966322484][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:26:03][351123966322484][819 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.621/200.621/200.621/0.000 ms\n [2025-08-23 15:26:03][351123966322484][819 ms][DEBUG] check_internet: online [2025-08-23 15:26:03][351123966322484][819 ms][DEBUG] END check_internet in 453 ms [2025-08-23 15:26:03][351123966322484][819 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:26:03][351123966322484][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6715\"}'\'' -e'"" [2025-08-23 15:26:03][351123966322484][820 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:26:03][351123966322484][820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6715\"}'\'' -e'"" [2025-08-23 15:26:07][351123966322484][4537 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:26:07][351123966322484][4537 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-23 15:26:07][351123966322484][4537 ms][WARN] Detected error: Process with pid 16596 either refused to load frida-agent, or terminated during injection [2025-08-23 15:26:07][351123966322484][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:26:07][351123966322484][4678 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 15:26:07][351123966322484][4678 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:26:07][351123966322484][4678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:26:07][351123966322484][4803 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:26:07][351123966322484][4803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:26:08][351123966322484][5006 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:26:10][351123966322484][7021 ms][DEBUG] START check_boot_completed [2025-08-23 15:26:10][351123966322484][7021 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:26:10][351123966322484][7068 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:26:10][351123966322484][7068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:26:10][351123966322484][7114 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:26:10][351123966322484][7114 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:26:13][351123966322484][10129 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:26:13][351123966322484][10129 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6715\"}'\'' -e'"" [2025-08-23 15:26:13][351123966322484][10739 ms][DEBUG] proc_open done in 609 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-23 15:26:13][351123966322484][10739 ms][DEBUG] END runCmdUntilRes#2 in 610 ms [2025-08-23 15:26:13][351123966322484][10739 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-23 15:26:16][350832442165751][0 ms][INFO] === Request start === [2025-08-23 15:26:16][350832442165751][1 ms][DEBUG] START check_scloud [2025-08-23 15:26:16][350832442165751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:26:17][350832442165751][261 ms][DEBUG] SU: done in 260 ms; out [2025-08-23 15:26:17][350832442165751][261 ms][WARN] targetPkg: not running, restarting [2025-08-23 15:26:17][350832442165751][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:26:17][350832442165751][401 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 15:26:17][350832442165751][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:26:17][350832442165751][527 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:26:19][350832442165751][2542 ms][DEBUG] END check_scloud in 2541 ms [2025-08-23 15:26:19][350832442165751][2542 ms][DEBUG] START check_boot_completed [2025-08-23 15:26:19][350832442165751][2542 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:26:19][350832442165751][2588 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:26:19][350832442165751][2588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:26:19][350832442165751][2651 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:26:19][350832442165751][2651 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 15:26:19][350832442165751][2652 ms][DEBUG] START check_internet [2025-08-23 15:26:19][350832442165751][2652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:26:19][350832442165751][2760 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 15:26:19][350832442165751][2761 ms][WARN] check_internet: offline [2025-08-23 15:26:19][350832442165751][2761 ms][DEBUG] END check_internet in 109 ms [2025-08-23 15:27:03][351123966322484][0 ms][INFO] === Request start === [2025-08-23 15:27:03][351123966322484][1 ms][DEBUG] START check_scloud [2025-08-23 15:27:03][351123966322484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:27:03][351123966322484][366 ms][DEBUG] SU: done in 365 ms; out [2025-08-23 15:27:03][351123966322484][366 ms][WARN] targetPkg: not running, restarting [2025-08-23 15:27:03][351123966322484][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:27:03][351123966322484][507 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 15:27:03][351123966322484][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:27:03][351123966322484][757 ms][DEBUG] SU: done in 249 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:27:05][351123966322484][2772 ms][DEBUG] END check_scloud in 2771 ms [2025-08-23 15:27:05][351123966322484][2772 ms][DEBUG] START check_boot_completed [2025-08-23 15:27:05][351123966322484][2772 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:27:05][351123966322484][2819 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:27:05][351123966322484][2819 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:27:05][351123966322484][2897 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 15:27:05][351123966322484][2897 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 15:27:05][351123966322484][2897 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:27:05][351123966322484][2897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7606\"}'\'' -e'"" [2025-08-23 15:27:05][351123966322484][2897 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:27:05][351123966322484][2897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7606\"}'\'' -e'"" [2025-08-23 15:27:34][351123966322484][31359 ms][DEBUG] proc_open done in 28462 ms (timeout); code=4; out.len=0 err.len=21 [2025-08-23 15:27:34][351123966322484][31359 ms][DEBUG] END runCmdUntilRes#1 in 28462 ms [2025-08-23 15:27:34][351123966322484][31359 ms][ERROR] NO RESULT; code=124 outTimeout was reached errTimeout was reached\r\n [2025-08-23 15:28:04][351123966322484][1 ms][INFO] === Request start === [2025-08-23 15:28:04][351123966322484][1 ms][DEBUG] START check_scloud [2025-08-23 15:28:04][351123966322484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:28:04][351123966322484][396 ms][DEBUG] SU: done in 395 ms; outu0_a118 22785 17944 23556600 53560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:28:04][351123966322484][396 ms][DEBUG] targetPkg: running [2025-08-23 15:28:04][351123966322484][396 ms][DEBUG] END check_scloud in 395 ms [2025-08-23 15:28:04][351123966322484][396 ms][DEBUG] START check_boot_completed [2025-08-23 15:28:04][351123966322484][396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:28:04][351123966322484][442 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 15:28:04][351123966322484][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:28:04][351123966322484][504 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:28:04][351123966322484][504 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 15:28:04][351123966322484][504 ms][DEBUG] START check_internet [2025-08-23 15:28:04][351123966322484][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.283/131.283/131.283/0.000 ms\n [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] check_internet: online [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:28:04][351123966322484][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1770\"}'\'' -e'"" [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:28:04][351123966322484][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123966322484\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1770\"}'\'' -e'"" [2025-08-23 15:28:09][351123966322484][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_062c8678-9e60-49c5-bfd7-bd0c21743385","id":"QR_062c8678-9e60-49c5-bfd7-bd0c21743385","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:28:09][351123966322484][5800 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-23 15:28:09][351123966322484][5800 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-23 15:28:09][351123966322484][5800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:28:12][350832442165751][0 ms][INFO] === Request start === [2025-08-23 15:28:12][350832442165751][1 ms][DEBUG] START check_scloud [2025-08-23 15:28:12][350832442165751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:28:12][350832442165751][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22785 17944 23732120 80072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:28:12][350832442165751][308 ms][DEBUG] targetPkg: running [2025-08-23 15:28:12][350832442165751][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:28:12][350832442165751][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:28:12][350832442165751][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:28:12][350832442165751][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:28:12][350832442165751][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:28:12][350832442165751][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:28:12][350832442165751][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:28:12][350832442165751][402 ms][DEBUG] START check_internet [2025-08-23 15:28:12][350832442165751][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.642/143.642/143.642/0.000 ms\n [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] check_internet: online [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] END check_internet in 266 ms [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:28:13][350832442165751][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442165751\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4518\"}'\'' -e'"" [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:28:13][350832442165751][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442165751\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4518\"}'\'' -e'"" [2025-08-23 15:28:17][350832442165751][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca5b8dc4-8126-4a39-a8d0-fa5f9b2db0da","id":"QR_ca5b8dc4-8126-4a39-a8d0-fa5f9b2db0da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:28:17][350832442165751][4713 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-23 15:28:17][350832442165751][4713 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-23 15:28:17][350832442165751][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:28:19][351272330778325][0 ms][INFO] === Request start === [2025-08-23 15:28:19][351272330778325][1 ms][DEBUG] START check_scloud [2025-08-23 15:28:19][351272330778325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:28:20][351272330778325][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 22785 17944 23911392 92076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:28:20][351272330778325][310 ms][DEBUG] targetPkg: running [2025-08-23 15:28:20][351272330778325][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:28:20][351272330778325][310 ms][DEBUG] START check_boot_completed [2025-08-23 15:28:20][351272330778325][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:28:20][351272330778325][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:28:20][351272330778325][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:28:20][351272330778325][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:28:20][351272330778325][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:28:20][351272330778325][419 ms][DEBUG] START check_internet [2025-08-23 15:28:20][351272330778325][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:28:20][351272330778325][700 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.026/174.026/174.026/0.000 ms\n [2025-08-23 15:28:20][351272330778325][700 ms][DEBUG] check_internet: online [2025-08-23 15:28:20][351272330778325][700 ms][DEBUG] END check_internet in 282 ms [2025-08-23 15:28:20][351272330778325][700 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:28:20][351272330778325][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330778325\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7432\"}'\'' -e'"" [2025-08-23 15:28:20][351272330778325][701 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:28:20][351272330778325][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330778325\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7432\"}'\'' -e'"" [2025-08-23 15:28:24][351272330778325][4480 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91e41905-afa1-41f0-b155-9a10d121d004","id":"QR_91e41905-afa1-41f0-b155-9a10d121d004","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:28:24][351272330778325][4636 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 15:28:24][351272330778325][4636 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 15:28:24][351272330778325][4636 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:35:03][353424470348306][1 ms][INFO] === Request start === [2025-08-23 15:35:03][353424470348306][1 ms][DEBUG] START check_scloud [2025-08-23 15:35:03][353424470348306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:35:04][353424470348306][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 22785 17944 23989988 91616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:35:04][353424470348306][263 ms][DEBUG] targetPkg: running [2025-08-23 15:35:04][353424470348306][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 15:35:04][353424470348306][263 ms][DEBUG] START check_boot_completed [2025-08-23 15:35:04][353424470348306][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:35:04][353424470348306][294 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:35:04][353424470348306][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:35:04][353424470348306][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:35:04][353424470348306][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:35:04][353424470348306][341 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:35:04][353424470348306][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353424470348306\",\"model\":\"SM-S908N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3010\"}'\'' -e'"" [2025-08-23 15:35:04][353424470348306][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:35:04][353424470348306][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353424470348306\",\"model\":\"SM-S908N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3010\"}'\'' -e'"" [2025-08-23 15:35:08][353424470348306][4918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bfd6fb3-0570-4709-8d63-d5f1a349200f","id":"QR_0bfd6fb3-0570-4709-8d63-d5f1a349200f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:35:08][353424470348306][5074 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-08-23 15:35:08][353424470348306][5074 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-23 15:35:08][353424470348306][5074 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:35:13][351813191370809][0 ms][INFO] === Request start === [2025-08-23 15:35:13][351813191370809][0 ms][DEBUG] START check_scloud [2025-08-23 15:35:13][351813191370809][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:35:13][351813191370809][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 22785 17944 24151992 99440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:35:13][351813191370809][252 ms][DEBUG] targetPkg: running [2025-08-23 15:35:13][351813191370809][252 ms][DEBUG] END check_scloud in 252 ms [2025-08-23 15:35:13][351813191370809][252 ms][DEBUG] START check_boot_completed [2025-08-23 15:35:13][351813191370809][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:35:13][351813191370809][284 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:35:13][351813191370809][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:35:13][351813191370809][331 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:35:13][351813191370809][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:35:13][351813191370809][331 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:35:13][351813191370809][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813191370809\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5811\"}'\'' -e'"" [2025-08-23 15:35:13][351813191370809][331 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:35:13][351813191370809][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813191370809\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5811\"}'\'' -e'"" [2025-08-23 15:35:18][351813191370809][5782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2896b7ee-6766-470d-a0dd-df74e117918b","id":"QR_2896b7ee-6766-470d-a0dd-df74e117918b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:35:19][351813191370809][5939 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-23 15:35:19][351813191370809][5939 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-23 15:35:19][351813191370809][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:36:03][357107764933943][0 ms][INFO] === Request start === [2025-08-23 15:36:03][357107764933943][1 ms][DEBUG] START check_scloud [2025-08-23 15:36:03][357107764933943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:36:03][357107764933943][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22785 17944 24259640 110500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:36:03][357107764933943][310 ms][DEBUG] targetPkg: running [2025-08-23 15:36:03][357107764933943][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:36:03][357107764933943][310 ms][DEBUG] START check_boot_completed [2025-08-23 15:36:03][357107764933943][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:36:03][357107764933943][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:36:03][357107764933943][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:36:04][357107764933943][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:36:04][357107764933943][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:36:04][357107764933943][404 ms][DEBUG] START check_internet [2025-08-23 15:36:04][357107764933943][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:36:04][357107764933943][747 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.866/126.866/126.866/0.000 ms\n [2025-08-23 15:36:04][357107764933943][747 ms][DEBUG] check_internet: online [2025-08-23 15:36:04][357107764933943][747 ms][DEBUG] END check_internet in 344 ms [2025-08-23 15:36:04][357107764933943][747 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:36:04][357107764933943][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107764933943\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5740\"}'\'' -e'"" [2025-08-23 15:36:04][357107764933943][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:36:04][357107764933943][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107764933943\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5740\"}'\'' -e'"" [2025-08-23 15:36:08][357107764933943][4793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2bd6812d-4b18-4414-82e2-0cb3a5707ddb","id":"QR_2bd6812d-4b18-4414-82e2-0cb3a5707ddb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:36:08][357107764933943][4949 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 15:36:08][357107764933943][4949 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-23 15:36:08][357107764933943][4949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:37:03][350019159921762][0 ms][INFO] === Request start === [2025-08-23 15:37:03][350019159921762][1 ms][DEBUG] START check_scloud [2025-08-23 15:37:03][350019159921762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:37:03][350019159921762][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 22785 17944 24416412 116972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:37:03][350019159921762][313 ms][DEBUG] targetPkg: running [2025-08-23 15:37:03][350019159921762][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 15:37:03][350019159921762][313 ms][DEBUG] START check_boot_completed [2025-08-23 15:37:03][350019159921762][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:37:03][350019159921762][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:37:03][350019159921762][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:37:03][350019159921762][453 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:37:03][350019159921762][453 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 15:37:03][350019159921762][453 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:37:03][350019159921762][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019159921762\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1972\"}'\'' -e'"" [2025-08-23 15:37:03][350019159921762][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:37:03][350019159921762][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019159921762\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1972\"}'\'' -e'"" [2025-08-23 15:37:07][350019159921762][4374 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5467f966-019c-48ac-8321-1a28cfb9e0dd","id":"QR_5467f966-019c-48ac-8321-1a28cfb9e0dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:37:07][350019159921762][4530 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-23 15:37:07][350019159921762][4530 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 15:37:07][350019159921762][4530 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:38:04][354106703109477][1 ms][INFO] === Request start === [2025-08-23 15:38:04][354106703109477][1 ms][DEBUG] START check_scloud [2025-08-23 15:38:04][354106703109477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:38:04][354106703109477][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 22785 17944 24519936 128288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:38:04][354106703109477][289 ms][DEBUG] targetPkg: running [2025-08-23 15:38:04][354106703109477][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 15:38:04][354106703109477][289 ms][DEBUG] START check_boot_completed [2025-08-23 15:38:04][354106703109477][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:38:04][354106703109477][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:38:04][354106703109477][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:38:04][354106703109477][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:38:04][354106703109477][384 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 15:38:04][354106703109477][384 ms][DEBUG] START check_internet [2025-08-23 15:38:04][354106703109477][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.674/290.674/290.674/0.000 ms\n [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] check_internet: online [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] END check_internet in 389 ms [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:38:05][354106703109477][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106703109477\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:38:05][354106703109477][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106703109477\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-08-23 15:38:10][354106703109477][6038 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c2673a0-5308-4e24-99ab-46ad053ba369","id":"QR_3c2673a0-5308-4e24-99ab-46ad053ba369","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:38:10][354106703109477][6194 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3343 [2025-08-23 15:38:10][354106703109477][6194 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-08-23 15:38:10][354106703109477][6194 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:38:15][353310805122799][0 ms][INFO] === Request start === [2025-08-23 15:38:15][353310805122799][1 ms][DEBUG] START check_scloud [2025-08-23 15:38:15][353310805122799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:38:15][353310805122799][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 22785 17944 24670472 138944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:38:15][353310805122799][296 ms][DEBUG] targetPkg: running [2025-08-23 15:38:15][353310805122799][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 15:38:15][353310805122799][296 ms][DEBUG] START check_boot_completed [2025-08-23 15:38:15][353310805122799][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:38:15][353310805122799][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:38:15][353310805122799][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:38:15][353310805122799][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:38:15][353310805122799][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:38:15][353310805122799][405 ms][DEBUG] START check_internet [2025-08-23 15:38:15][353310805122799][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:38:16][353310805122799][702 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.480/184.480/184.480/0.000 ms\n [2025-08-23 15:38:16][353310805122799][702 ms][DEBUG] check_internet: online [2025-08-23 15:38:16][353310805122799][702 ms][DEBUG] END check_internet in 298 ms [2025-08-23 15:38:16][353310805122799][702 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:38:16][353310805122799][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8226\"}'\'' -e'"" [2025-08-23 15:38:16][353310805122799][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:38:16][353310805122799][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8226\"}'\'' -e'"" [2025-08-23 15:38:20][353310805122799][4841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_328ac2c2-8a6a-413e-8251-be7bbca3495d","id":"QR_328ac2c2-8a6a-413e-8251-be7bbca3495d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:38:20][353310805122799][4997 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3343 [2025-08-23 15:38:20][353310805122799][4997 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 15:38:20][353310805122799][4997 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:38:23][351272337208680][0 ms][INFO] === Request start === [2025-08-23 15:38:23][351272337208680][1 ms][DEBUG] START check_scloud [2025-08-23 15:38:23][351272337208680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:38:23][351272337208680][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 22785 17944 24819088 150680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:38:23][351272337208680][289 ms][DEBUG] targetPkg: running [2025-08-23 15:38:23][351272337208680][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 15:38:23][351272337208680][290 ms][DEBUG] START check_boot_completed [2025-08-23 15:38:23][351272337208680][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:38:23][351272337208680][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:38:23][351272337208680][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:38:23][351272337208680][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:38:23][351272337208680][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:38:23][351272337208680][399 ms][DEBUG] START check_internet [2025-08-23 15:38:23][351272337208680][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.019/159.019/159.019/0.000 ms\n [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] check_internet: online [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:38:23][351272337208680][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337208680\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6495\"}'\'' -e'"" [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:38:23][351272337208680][680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337208680\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6495\"}'\'' -e'"" [2025-08-23 15:38:27][351272337208680][4413 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2dc58101-295b-414f-bfad-9cf83d9518bb","id":"QR_2dc58101-295b-414f-bfad-9cf83d9518bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:38:27][351272337208680][4569 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-23 15:38:27][351272337208680][4569 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:38:27][351272337208680][4569 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:38:31][350633292087719][0 ms][INFO] === Request start === [2025-08-23 15:38:31][350633292087719][1 ms][DEBUG] START check_scloud [2025-08-23 15:38:31][350633292087719][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:38:32][350633292087719][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22785 17944 24963572 160976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:38:32][350633292087719][317 ms][DEBUG] targetPkg: running [2025-08-23 15:38:32][350633292087719][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 15:38:32][350633292087719][317 ms][DEBUG] START check_boot_completed [2025-08-23 15:38:32][350633292087719][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:38:32][350633292087719][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:38:32][350633292087719][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:38:32][350633292087719][458 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:38:32][350633292087719][458 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 15:38:32][350633292087719][458 ms][DEBUG] START check_internet [2025-08-23 15:38:32][350633292087719][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.319/216.319/216.319/0.000 ms\n [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] check_internet: online [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] END check_internet in 359 ms [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:38:32][350633292087719][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292087719\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4449\"}'\'' -e'"" [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:38:32][350633292087719][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292087719\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4449\"}'\'' -e'"" [2025-08-23 15:38:38][350633292087719][6081 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e348dd0f-fdb2-4c42-950b-6184b8e3f757","id":"QR_e348dd0f-fdb2-4c42-950b-6184b8e3f757","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:38:38][350633292087719][6237 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-23 15:38:38][350633292087719][6237 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-23 15:38:38][350633292087719][6237 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:39:03][358212584990492][0 ms][INFO] === Request start === [2025-08-23 15:39:03][358212584990492][1 ms][DEBUG] START check_scloud [2025-08-23 15:39:03][358212584990492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:39:03][358212584990492][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 22785 17944 25077392 171116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:39:03][358212584990492][294 ms][DEBUG] targetPkg: running [2025-08-23 15:39:03][358212584990492][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 15:39:03][358212584990492][294 ms][DEBUG] START check_boot_completed [2025-08-23 15:39:03][358212584990492][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:39:03][358212584990492][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:39:03][358212584990492][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:39:03][358212584990492][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:39:03][358212584990492][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:39:03][358212584990492][387 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:39:03][358212584990492][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9520\"}'\'' -e'"" [2025-08-23 15:39:03][358212584990492][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:39:03][358212584990492][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9520\"}'\'' -e'"" [2025-08-23 15:39:08][358212584990492][4777 ms][DEBUG] proc_open done in 4390 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:39:08][358212584990492][4777 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-23 15:39:08][358212584990492][4777 ms][WARN] Detected error: Process with pid 22785 either refused to load frida-agent, or terminated during injection [2025-08-23 15:39:08][358212584990492][4777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:39:08][358212584990492][4918 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 15:39:08][358212584990492][4918 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:39:08][358212584990492][4918 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:39:08][358212584990492][5058 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 15:39:08][358212584990492][5058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:39:08][358212584990492][5230 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:39:10][358212584990492][7245 ms][DEBUG] START check_boot_completed [2025-08-23 15:39:10][358212584990492][7245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:39:10][358212584990492][7292 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:39:10][358212584990492][7292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:39:10][358212584990492][7339 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:39:10][358212584990492][7339 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:39:13][358212584990492][10354 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:39:13][358212584990492][10354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9520\"}'\'' -e'"" [2025-08-23 15:39:17][358212584990492][14103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_107bca91-2772-4ec1-854a-ac98fa77e3e7","id":"QR_107bca91-2772-4ec1-854a-ac98fa77e3e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:39:17][358212584990492][14259 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-23 15:39:17][358212584990492][14259 ms][DEBUG] END runCmdUntilRes#2 in 3905 ms [2025-08-23 15:39:17][358212584990492][14259 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:40:03][353684140495080][0 ms][INFO] === Request start === [2025-08-23 15:40:03][353684140495080][1 ms][DEBUG] START check_scloud [2025-08-23 15:40:03][353684140495080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:40:03][353684140495080][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 31934 17944 23721172 127256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:40:03][353684140495080][317 ms][DEBUG] targetPkg: running [2025-08-23 15:40:03][353684140495080][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 15:40:03][353684140495080][317 ms][DEBUG] START check_boot_completed [2025-08-23 15:40:03][353684140495080][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:40:03][353684140495080][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:40:03][353684140495080][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:40:03][353684140495080][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:40:03][353684140495080][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:40:03][353684140495080][426 ms][DEBUG] START check_internet [2025-08-23 15:40:03][353684140495080][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.905/200.905/200.905/0.000 ms\n [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] check_internet: online [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] END check_internet in 531 ms [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:40:04][353684140495080][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140495080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7571\"}'\'' -e'"" [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:40:04][353684140495080][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140495080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7571\"}'\'' -e'"" [2025-08-23 15:40:07][353684140495080][4831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07d95bc9-f079-4002-b969-ce6e59082c3e","id":"QR_07d95bc9-f079-4002-b969-ce6e59082c3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:40:08][353684140495080][4987 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 15:40:08][353684140495080][4987 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 15:40:08][353684140495080][4987 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:42:29][350391370140260][1 ms][INFO] === Request start === [2025-08-23 15:42:29][350391370140260][1 ms][DEBUG] START check_scloud [2025-08-23 15:42:29][350391370140260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:42:29][350391370140260][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 31934 17944 23837932 138136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:42:29][350391370140260][312 ms][DEBUG] targetPkg: running [2025-08-23 15:42:29][350391370140260][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 15:42:29][350391370140260][312 ms][DEBUG] START check_boot_completed [2025-08-23 15:42:29][350391370140260][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:42:29][350391370140260][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:42:29][350391370140260][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:42:29][350391370140260][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:42:29][350391370140260][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:42:29][350391370140260][421 ms][DEBUG] START check_internet [2025-08-23 15:42:29][350391370140260][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.581/164.581/164.581/0.000 ms\n [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] check_internet: online [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:42:30][350391370140260][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:42:30][350391370140260][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-08-23 15:42:33][350391370140260][4482 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:42:34][350391370140260][4639 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-23 15:42:34][350391370140260][4639 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-23 15:42:34][350391370140260][4639 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:42:34][][0 ms][INFO] === Request start === [2025-08-23 15:42:34][][1 ms][DEBUG] START check_scloud [2025-08-23 15:42:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:42:34][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 31934 17944 24013172 149752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:42:34][][260 ms][DEBUG] targetPkg: running [2025-08-23 15:42:34][][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 15:42:34][][260 ms][DEBUG] START check_boot_completed [2025-08-23 15:42:34][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:42:34][][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:42:34][][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:42:34][][339 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:42:34][][339 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 15:42:34][][339 ms][DEBUG] START check_internet [2025-08-23 15:42:34][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:42:35][][588 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.982/138.982/138.982/0.000 ms\n [2025-08-23 15:42:35][][588 ms][DEBUG] check_internet: online [2025-08-23 15:42:35][][588 ms][DEBUG] END check_internet in 249 ms [2025-08-23 15:42:35][][588 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:42:35][][588 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92AC63Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5100\"}'\'' -e'"" [2025-08-23 15:42:35][][588 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:42:35][][588 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92AC63Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5100\"}'\'' -e'"" [2025-08-23 15:42:38][][3899 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:42:38][][4056 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=107 [2025-08-23 15:42:38][][4056 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-08-23 15:42:38][][4056 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:42:40][350391370140260][0 ms][INFO] === Request start === [2025-08-23 15:42:40][350391370140260][1 ms][DEBUG] START check_scloud [2025-08-23 15:42:40][350391370140260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:42:41][350391370140260][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 31934 17944 24147388 160588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:42:41][350391370140260][292 ms][DEBUG] targetPkg: running [2025-08-23 15:42:41][350391370140260][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 15:42:41][350391370140260][292 ms][DEBUG] START check_boot_completed [2025-08-23 15:42:41][350391370140260][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:42:41][350391370140260][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:42:41][350391370140260][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:42:41][350391370140260][432 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 15:42:41][350391370140260][432 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 15:42:41][350391370140260][432 ms][DEBUG] START check_internet [2025-08-23 15:42:41][350391370140260][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.715/167.715/167.715/0.000 ms\n [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] check_internet: online [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] END check_internet in 298 ms [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:42:41][350391370140260][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3072\"}'\'' -e'"" [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:42:41][350391370140260][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3072\"}'\'' -e'"" [2025-08-23 15:42:46][350391370140260][5587 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cce005e9-3bf4-4163-b42f-b040aed56f95","id":"QR_cce005e9-3bf4-4163-b42f-b040aed56f95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:42:46][350391370140260][5743 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=3343 [2025-08-23 15:42:46][350391370140260][5743 ms][DEBUG] END runCmdUntilRes#1 in 5012 ms [2025-08-23 15:42:46][350391370140260][5744 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:43:03][351199555689137][0 ms][INFO] === Request start === [2025-08-23 15:43:03][351199555689137][1 ms][DEBUG] START check_scloud [2025-08-23 15:43:03][351199555689137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:43:03][351199555689137][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31934 17944 24244312 172696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:43:03][351199555689137][299 ms][DEBUG] targetPkg: running [2025-08-23 15:43:03][351199555689137][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 15:43:03][351199555689137][299 ms][DEBUG] START check_boot_completed [2025-08-23 15:43:03][351199555689137][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:43:03][351199555689137][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:43:03][351199555689137][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:43:03][351199555689137][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:43:03][351199555689137][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:43:03][351199555689137][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:43:03][351199555689137][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555689137\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3695\"}'\'' -e'"" [2025-08-23 15:43:03][351199555689137][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:43:03][351199555689137][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555689137\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3695\"}'\'' -e'"" [2025-08-23 15:43:07][351199555689137][4032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d592c9f2-91a1-448a-8015-c028323044d5","id":"QR_d592c9f2-91a1-448a-8015-c028323044d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:43:07][351199555689137][4188 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-23 15:43:07][351199555689137][4189 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-23 15:43:07][351199555689137][4189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:44:04][350938289429802][1 ms][INFO] === Request start === [2025-08-23 15:44:04][350938289429802][1 ms][DEBUG] START check_scloud [2025-08-23 15:44:04][350938289429802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:44:05][350938289429802][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31934 17944 24347708 183344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:44:05][350938289429802][313 ms][DEBUG] targetPkg: running [2025-08-23 15:44:05][350938289429802][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 15:44:05][350938289429802][314 ms][DEBUG] START check_boot_completed [2025-08-23 15:44:05][350938289429802][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:44:05][350938289429802][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:44:05][350938289429802][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:44:05][350938289429802][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:44:05][350938289429802][422 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 15:44:05][350938289429802][422 ms][DEBUG] START check_internet [2025-08-23 15:44:05][350938289429802][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.685/201.685/201.685/0.000 ms\n [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] check_internet: online [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] END check_internet in 453 ms [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:44:05][350938289429802][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2894\"}'\'' -e'"" [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:44:05][350938289429802][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2894\"}'\'' -e'"" [2025-08-23 15:44:09][350938289429802][4608 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:44:09][350938289429802][4764 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-23 15:44:09][350938289429802][4764 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:44:09][350938289429802][4764 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:44:10][][0 ms][INFO] === Request start === [2025-08-23 15:44:10][][1 ms][DEBUG] START check_scloud [2025-08-23 15:44:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:44:10][][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 31934 17944 24467588 195664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:44:10][][303 ms][DEBUG] targetPkg: running [2025-08-23 15:44:10][][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 15:44:10][][303 ms][DEBUG] START check_boot_completed [2025-08-23 15:44:10][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:44:10][][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 15:44:10][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:44:10][][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:44:10][][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 15:44:10][][381 ms][DEBUG] START check_internet [2025-08-23 15:44:10][][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:44:10][][631 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.717/143.717/143.717/0.000 ms\n [2025-08-23 15:44:10][][631 ms][DEBUG] check_internet: online [2025-08-23 15:44:10][][631 ms][DEBUG] END check_internet in 250 ms [2025-08-23 15:44:10][][631 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:44:10][][632 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20QVWWB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6021\"}'\'' -e'"" [2025-08-23 15:44:10][][632 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:44:10][][632 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20QVWWB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6021\"}'\'' -e'"" [2025-08-23 15:44:13][][3849 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:44:14][][4005 ms][DEBUG] proc_open done in 3373 ms; code=255; res.len=107 [2025-08-23 15:44:14][][4005 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-08-23 15:44:14][][4005 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:44:16][350938289429802][0 ms][INFO] === Request start === [2025-08-23 15:44:16][350938289429802][1 ms][DEBUG] START check_scloud [2025-08-23 15:44:16][350938289429802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:44:16][350938289429802][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 31934 17944 24593676 206404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:44:16][350938289429802][261 ms][DEBUG] targetPkg: running [2025-08-23 15:44:16][350938289429802][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 15:44:16][350938289429802][262 ms][DEBUG] START check_boot_completed [2025-08-23 15:44:16][350938289429802][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:44:16][350938289429802][306 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 15:44:16][350938289429802][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:44:16][350938289429802][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:44:16][350938289429802][354 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 15:44:16][350938289429802][354 ms][DEBUG] START check_internet [2025-08-23 15:44:16][350938289429802][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:44:16][350938289429802][619 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.764/134.764/134.764/0.000 ms\n [2025-08-23 15:44:16][350938289429802][619 ms][DEBUG] check_internet: online [2025-08-23 15:44:16][350938289429802][619 ms][DEBUG] END check_internet in 266 ms [2025-08-23 15:44:16][350938289429802][619 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:44:16][350938289429802][620 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5318\"}'\'' -e'"" [2025-08-23 15:44:16][350938289429802][620 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:44:16][350938289429802][620 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5318\"}'\'' -e'"" [2025-08-23 15:44:26][350938289429802][10757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d300e86-b61e-46be-99cf-4c56dbc51fc1","id":"QR_4d300e86-b61e-46be-99cf-4c56dbc51fc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:44:26][350938289429802][10913 ms][DEBUG] proc_open done in 10294 ms; code=255; res.len=3343 [2025-08-23 15:44:26][350938289429802][10913 ms][DEBUG] END runCmdUntilRes#1 in 10294 ms [2025-08-23 15:44:26][350938289429802][10914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:45:04][356544395158071][1 ms][INFO] === Request start === [2025-08-23 15:45:04][356544395158071][1 ms][DEBUG] START check_scloud [2025-08-23 15:45:04][356544395158071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:45:04][356544395158071][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 31934 17944 24695208 216900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:45:04][356544395158071][251 ms][DEBUG] targetPkg: running [2025-08-23 15:45:04][356544395158071][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-23 15:45:04][356544395158071][251 ms][DEBUG] START check_boot_completed [2025-08-23 15:45:04][356544395158071][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:45:04][356544395158071][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:45:04][356544395158071][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:45:04][356544395158071][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:45:04][356544395158071][343 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 15:45:04][356544395158071][343 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:45:04][356544395158071][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395158071\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5580\"}'\'' -e'"" [2025-08-23 15:45:04][356544395158071][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:45:04][356544395158071][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395158071\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5580\"}'\'' -e'"" [2025-08-23 15:45:09][356544395158071][5624 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_574637f3-c3c4-4b49-a6cf-1fd1e13df87b","id":"QR_574637f3-c3c4-4b49-a6cf-1fd1e13df87b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:45:10][356544395158071][5780 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-08-23 15:45:10][356544395158071][5780 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-23 15:45:10][356544395158071][5780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:46:04][353029499448407][0 ms][INFO] === Request start === [2025-08-23 15:46:04][353029499448407][1 ms][DEBUG] START check_scloud [2025-08-23 15:46:04][353029499448407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:46:04][353029499448407][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31934 17944 24830604 221768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:46:04][353029499448407][304 ms][DEBUG] targetPkg: running [2025-08-23 15:46:04][353029499448407][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 15:46:04][353029499448407][304 ms][DEBUG] START check_boot_completed [2025-08-23 15:46:04][353029499448407][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:46:04][353029499448407][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:46:04][353029499448407][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:46:04][353029499448407][415 ms][DEBUG] SU: done in 64 ms; out [2025-08-23 15:46:04][353029499448407][415 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-23 15:46:04][353029499448407][415 ms][DEBUG] START check_internet [2025-08-23 15:46:04][353029499448407][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.780/201.780/201.780/0.000 ms\n [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] check_internet: online [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] END check_internet in 467 ms [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:46:05][353029499448407][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029499448407\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9123\"}'\'' -e'"" [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:46:05][353029499448407][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029499448407\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9123\"}'\'' -e'"" [2025-08-23 15:46:10][353029499448407][5834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67838be1-9c20-49f0-8618-085441aa41bd","id":"QR_67838be1-9c20-49f0-8618-085441aa41bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:46:10][353029499448407][5990 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-23 15:46:10][353029499448407][5990 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-23 15:46:10][353029499448407][5990 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:46:16][356353928409369][1 ms][INFO] === Request start === [2025-08-23 15:46:16][356353928409369][1 ms][DEBUG] START check_scloud [2025-08-23 15:46:16][356353928409369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:46:17][356353928409369][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 31934 17944 24989460 230096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:46:17][356353928409369][295 ms][DEBUG] targetPkg: running [2025-08-23 15:46:17][356353928409369][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 15:46:17][356353928409369][295 ms][DEBUG] START check_boot_completed [2025-08-23 15:46:17][356353928409369][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:46:17][356353928409369][325 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 15:46:17][356353928409369][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:46:17][356353928409369][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:46:17][356353928409369][372 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 15:46:17][356353928409369][372 ms][DEBUG] START check_internet [2025-08-23 15:46:17][356353928409369][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.995/174.995/174.995/0.000 ms\n [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] check_internet: online [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] END check_internet in 281 ms [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:46:17][356353928409369][654 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353928409369\",\"model\":\"SM-M146B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:46:17][356353928409369][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353928409369\",\"model\":\"SM-M146B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-23 15:46:21][356353928409369][4543 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 15:46:21][356353928409369][4543 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 15:46:21][356353928409369][4543 ms][WARN] Detected error: Process with pid 31934 either refused to load frida-agent, or terminated during injection [2025-08-23 15:46:21][356353928409369][4543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:46:21][356353928409369][4668 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:46:21][356353928409369][4668 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:46:21][356353928409369][4668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:46:21][356353928409369][4793 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 15:46:21][356353928409369][4793 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:46:21][356353928409369][4934 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:46:23][356353928409369][6949 ms][DEBUG] START check_boot_completed [2025-08-23 15:46:23][356353928409369][6949 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:46:23][356353928409369][6996 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:46:23][356353928409369][6996 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:46:23][356353928409369][7043 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:46:23][356353928409369][7043 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:46:26][356353928409369][10057 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:46:26][356353928409369][10058 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353928409369\",\"model\":\"SM-M146B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-23 15:46:31][356353928409369][14806 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c8a25a8-d4ea-4b3e-9819-9ae43485bf5a","id":"QR_4c8a25a8-d4ea-4b3e-9819-9ae43485bf5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:46:31][356353928409369][14963 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-08-23 15:46:31][356353928409369][14963 ms][DEBUG] END runCmdUntilRes#2 in 4905 ms [2025-08-23 15:46:31][356353928409369][14963 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:48:04][352363867313450][0 ms][INFO] === Request start === [2025-08-23 15:48:04][352363867313450][1 ms][DEBUG] START check_scloud [2025-08-23 15:48:04][352363867313450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:48:04][352363867313450][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 1072 17944 23706928 126428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:48:04][352363867313450][258 ms][DEBUG] targetPkg: running [2025-08-23 15:48:04][352363867313450][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 15:48:04][352363867313450][258 ms][DEBUG] START check_boot_completed [2025-08-23 15:48:04][352363867313450][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:48:04][352363867313450][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:48:04][352363867313450][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:48:04][352363867313450][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:48:04][352363867313450][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:48:04][352363867313450][351 ms][DEBUG] START check_internet [2025-08-23 15:48:04][352363867313450][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.024/246.024/246.024/0.000 ms\n [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] check_internet: online [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] END check_internet in 344 ms [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:48:04][352363867313450][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352363867313450\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4983\"}'\'' -e'"" [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:48:04][352363867313450][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352363867313450\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4983\"}'\'' -e'"" [2025-08-23 15:48:08][352363867313450][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2da1c33c-739b-4bbf-a04b-26d9752b93ef","id":"QR_2da1c33c-739b-4bbf-a04b-26d9752b93ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:48:09][352363867313450][4897 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 15:48:09][352363867313450][4897 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 15:48:09][352363867313450][4897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:48:13][351537276907413][0 ms][INFO] === Request start === [2025-08-23 15:48:13][351537276907413][1 ms][DEBUG] START check_scloud [2025-08-23 15:48:13][351537276907413][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:48:13][351537276907413][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 1072 17944 23861624 137056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:48:13][351537276907413][257 ms][DEBUG] targetPkg: running [2025-08-23 15:48:13][351537276907413][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 15:48:13][351537276907413][258 ms][DEBUG] START check_boot_completed [2025-08-23 15:48:13][351537276907413][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:48:13][351537276907413][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:48:13][351537276907413][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:48:13][351537276907413][367 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:48:13][351537276907413][367 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:48:13][351537276907413][367 ms][DEBUG] START check_internet [2025-08-23 15:48:13][351537276907413][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.574/237.574/237.574/0.000 ms\n [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] check_internet: online [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] END check_internet in 359 ms [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:48:14][351537276907413][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537276907413\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:48:14][351537276907413][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537276907413\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-08-23 15:48:19][351537276907413][5818 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60c0a016-e0a3-4835-824c-c4c5de895fff","id":"QR_60c0a016-e0a3-4835-824c-c4c5de895fff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:48:19][351537276907413][5975 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-23 15:48:19][351537276907413][5975 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-23 15:48:19][351537276907413][5975 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:49:05][351767113131329][1 ms][INFO] === Request start === [2025-08-23 15:49:05][351767113131329][1 ms][DEBUG] START check_scloud [2025-08-23 15:49:05][351767113131329][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:49:05][351767113131329][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1072 17944 23988588 149284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:49:05][351767113131329][305 ms][DEBUG] targetPkg: running [2025-08-23 15:49:05][351767113131329][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 15:49:05][351767113131329][305 ms][DEBUG] START check_boot_completed [2025-08-23 15:49:05][351767113131329][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:49:05][351767113131329][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:49:05][351767113131329][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:49:05][351767113131329][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:49:05][351767113131329][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:49:05][351767113131329][398 ms][DEBUG] rawBody.length=1158 [2025-08-23 15:49:05][351767113131329][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351767113131329\",\"model\":\"SM-X710\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W60DMATF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-08-23 15:49:05][351767113131329][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:49:05][351767113131329][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351767113131329\",\"model\":\"SM-X710\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W60DMATF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-08-23 15:49:09][351767113131329][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f45ae2f-ee53-4576-8592-4a91ae175806","id":"QR_8f45ae2f-ee53-4576-8592-4a91ae175806","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:49:09][351767113131329][4507 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 15:49:09][351767113131329][4507 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 15:49:09][351767113131329][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:51:29][351317840272390][1 ms][INFO] === Request start === [2025-08-23 15:51:29][351317840272390][1 ms][DEBUG] START check_scloud [2025-08-23 15:51:29][351317840272390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:51:29][351317840272390][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 1072 17944 24130092 160604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:51:29][351317840272390][285 ms][DEBUG] targetPkg: running [2025-08-23 15:51:29][351317840272390][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-23 15:51:29][351317840272390][286 ms][DEBUG] START check_boot_completed [2025-08-23 15:51:29][351317840272390][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:51:29][351317840272390][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:51:29][351317840272390][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:51:29][351317840272390][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:51:29][351317840272390][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:51:29][351317840272390][395 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:51:29][351317840272390][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-08-23 15:51:29][351317840272390][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:51:29][351317840272390][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-08-23 15:51:33][351317840272390][4315 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:51:33][351317840272390][4472 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=107 [2025-08-23 15:51:33][351317840272390][4472 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 15:51:33][351317840272390][4472 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:51:34][][0 ms][INFO] === Request start === [2025-08-23 15:51:34][][1 ms][DEBUG] START check_scloud [2025-08-23 15:51:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:51:34][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1072 17944 24271788 171624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:51:34][][308 ms][DEBUG] targetPkg: running [2025-08-23 15:51:34][][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 15:51:34][][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:51:34][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:51:34][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:51:34][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:51:34][][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:51:34][][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:51:34][][402 ms][DEBUG] rawBody.length=1129 [2025-08-23 15:51:34][][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY13G10FB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4016\"}'\'' -e'"" [2025-08-23 15:51:34][][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:51:34][][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY13G10FB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4016\"}'\'' -e'"" [2025-08-23 15:51:37][][3745 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 15:51:38][][3901 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-23 15:51:38][][3901 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-23 15:51:38][][3901 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 15:51:40][351317840272390][0 ms][INFO] === Request start === [2025-08-23 15:51:40][351317840272390][1 ms][DEBUG] START check_scloud [2025-08-23 15:51:40][351317840272390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:51:40][351317840272390][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 1072 17944 24416244 183324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:51:40][351317840272390][316 ms][DEBUG] targetPkg: running [2025-08-23 15:51:40][351317840272390][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 15:51:40][351317840272390][316 ms][DEBUG] START check_boot_completed [2025-08-23 15:51:40][351317840272390][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:51:40][351317840272390][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:51:40][351317840272390][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:51:40][351317840272390][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:51:40][351317840272390][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:51:40][351317840272390][425 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:51:40][351317840272390][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4381\"}'\'' -e'"" [2025-08-23 15:51:40][351317840272390][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:51:40][351317840272390][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4381\"}'\'' -e'"" [2025-08-23 15:51:45][351317840272390][5642 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75263c37-83dd-4140-8b60-8392641217ff","id":"QR_75263c37-83dd-4140-8b60-8392641217ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:51:45][351317840272390][5798 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-08-23 15:51:45][351317840272390][5798 ms][DEBUG] END runCmdUntilRes#1 in 5373 ms [2025-08-23 15:51:45][351317840272390][5798 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:52:03][355382707431600][0 ms][INFO] === Request start === [2025-08-23 15:52:03][355382707431600][1 ms][DEBUG] START check_scloud [2025-08-23 15:52:03][355382707431600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:52:03][355382707431600][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 1072 17944 24491152 194532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:52:03][355382707431600][286 ms][DEBUG] targetPkg: running [2025-08-23 15:52:03][355382707431600][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-23 15:52:03][355382707431600][286 ms][DEBUG] START check_boot_completed [2025-08-23 15:52:03][355382707431600][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:52:03][355382707431600][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:52:03][355382707431600][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:52:03][355382707431600][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 15:52:03][355382707431600][394 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 15:52:03][355382707431600][394 ms][DEBUG] START check_internet [2025-08-23 15:52:03][355382707431600][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.552/201.552/201.552/0.000 ms\n [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] check_internet: online [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] END check_internet in 453 ms [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:52:04][355382707431600][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707431600\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:52:04][355382707431600][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707431600\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-23 15:52:07][355382707431600][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d2608f0-31ef-4972-a7c9-4381bc72edf4","id":"QR_8d2608f0-31ef-4972-a7c9-4381bc72edf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:52:08][355382707431600][4799 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-23 15:52:08][355382707431600][4799 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 15:52:08][355382707431600][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:53:03][354747952927844][0 ms][INFO] === Request start === [2025-08-23 15:53:03][354747952927844][1 ms][DEBUG] START check_scloud [2025-08-23 15:53:03][354747952927844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:53:03][354747952927844][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1072 17944 24600820 206616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:53:03][354747952927844][308 ms][DEBUG] targetPkg: running [2025-08-23 15:53:03][354747952927844][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 15:53:03][354747952927844][308 ms][DEBUG] START check_boot_completed [2025-08-23 15:53:03][354747952927844][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:53:03][354747952927844][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:53:03][354747952927844][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:53:03][354747952927844][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:53:03][354747952927844][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:53:03][354747952927844][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:53:03][354747952927844][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952927844\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-08-23 15:53:03][354747952927844][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:53:03][354747952927844][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747952927844\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-08-23 15:53:07][354747952927844][4541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a053716-d22b-483b-a190-a93feeb40d34","id":"QR_9a053716-d22b-483b-a190-a93feeb40d34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:53:07][354747952927844][4697 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 15:53:07][354747952927844][4697 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 15:53:07][354747952927844][4697 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:53:11][358226406656362][0 ms][INFO] === Request start === [2025-08-23 15:53:11][358226406656362][1 ms][DEBUG] START check_scloud [2025-08-23 15:53:11][358226406656362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:53:11][358226406656362][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 1072 17944 24749564 217572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:53:11][358226406656362][303 ms][DEBUG] targetPkg: running [2025-08-23 15:53:11][358226406656362][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 15:53:11][358226406656362][303 ms][DEBUG] START check_boot_completed [2025-08-23 15:53:11][358226406656362][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:53:11][358226406656362][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:53:11][358226406656362][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:53:12][358226406656362][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:53:12][358226406656362][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:53:12][358226406656362][412 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:53:12][358226406656362][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358226406656362\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-08-23 15:53:12][358226406656362][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:53:12][358226406656362][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358226406656362\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-08-23 15:53:17][358226406656362][6020 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dab0f316-e533-4834-921f-7b0141c9c29a","id":"QR_dab0f316-e533-4834-921f-7b0141c9c29a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:53:17][358226406656362][6176 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-08-23 15:53:17][358226406656362][6176 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-08-23 15:53:17][358226406656362][6176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:53:24][357980448148967][0 ms][INFO] === Request start === [2025-08-23 15:53:24][357980448148967][0 ms][DEBUG] START check_scloud [2025-08-23 15:53:24][357980448148967][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:53:25][357980448148967][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 1072 17944 24861408 228460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:53:25][357980448148967][309 ms][DEBUG] targetPkg: running [2025-08-23 15:53:25][357980448148967][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:53:25][357980448148967][309 ms][DEBUG] START check_boot_completed [2025-08-23 15:53:25][357980448148967][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:53:25][357980448148967][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:53:25][357980448148967][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:53:25][357980448148967][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:53:25][357980448148967][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:53:25][357980448148967][403 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:53:25][357980448148967][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-23 15:53:25][357980448148967][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:53:25][357980448148967][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-23 15:53:31][357980448148967][7166 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_040281c9-7e6c-4c39-adfb-09ded2865704","id":"QR_040281c9-7e6c-4c39-adfb-09ded2865704","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:53:32][357980448148967][7322 ms][DEBUG] proc_open done in 6919 ms; code=255; res.len=3343 [2025-08-23 15:53:32][357980448148967][7322 ms][DEBUG] END runCmdUntilRes#1 in 6919 ms [2025-08-23 15:53:32][357980448148967][7322 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:54:04][351736904029349][1 ms][INFO] === Request start === [2025-08-23 15:54:04][351736904029349][1 ms][DEBUG] START check_scloud [2025-08-23 15:54:04][351736904029349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:54:05][351736904029349][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 1072 17944 24987360 240492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:54:05][351736904029349][311 ms][DEBUG] targetPkg: running [2025-08-23 15:54:05][351736904029349][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 15:54:05][351736904029349][311 ms][DEBUG] START check_boot_completed [2025-08-23 15:54:05][351736904029349][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:54:05][351736904029349][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:54:05][351736904029349][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:54:05][351736904029349][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:54:05][351736904029349][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:54:05][351736904029349][420 ms][DEBUG] START check_internet [2025-08-23 15:54:05][351736904029349][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.454/218.454/218.454/0.000 ms\n [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] check_internet: online [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] END check_internet in 344 ms [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:54:05][351736904029349][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736904029349\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9428\"}'\'' -e'"" [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:54:05][351736904029349][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736904029349\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9428\"}'\'' -e'"" [2025-08-23 15:54:09][351736904029349][4403 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 15:54:09][351736904029349][4403 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-23 15:54:09][351736904029349][4403 ms][WARN] Detected error: Process with pid 1072 either refused to load frida-agent, or terminated during injection [2025-08-23 15:54:09][351736904029349][4403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 15:54:09][351736904029349][4544 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 15:54:09][351736904029349][4544 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 15:54:09][351736904029349][4544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 15:54:09][351736904029349][4653 ms][DEBUG] SU: done in 110 ms; out [2025-08-23 15:54:09][351736904029349][4654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 15:54:09][351736904029349][4810 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 15:54:11][351736904029349][6825 ms][DEBUG] START check_boot_completed [2025-08-23 15:54:11][351736904029349][6825 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:54:11][351736904029349][6872 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:54:11][351736904029349][6872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:54:11][351736904029349][6918 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:54:11][351736904029349][6918 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 15:54:14][351736904029349][9933 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 15:54:14][351736904029349][9934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736904029349\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9428\"}'\'' -e'"" [2025-08-23 15:54:21][351736904029349][16650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cee96569-9c2f-4f25-baf1-bdb6185cc0a0","id":"QR_cee96569-9c2f-4f25-baf1-bdb6185cc0a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:54:21][351736904029349][16807 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=3343 [2025-08-23 15:54:21][351736904029349][16807 ms][DEBUG] END runCmdUntilRes#2 in 6874 ms [2025-08-23 15:54:21][351736904029349][16807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:55:02][352600224739954][1 ms][INFO] === Request start === [2025-08-23 15:55:02][352600224739954][1 ms][DEBUG] START check_scloud [2025-08-23 15:55:02][352600224739954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:55:03][352600224739954][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 2408 17944 23720980 127284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:55:03][352600224739954][263 ms][DEBUG] targetPkg: running [2025-08-23 15:55:03][352600224739954][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 15:55:03][352600224739954][263 ms][DEBUG] START check_boot_completed [2025-08-23 15:55:03][352600224739954][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:55:03][352600224739954][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:55:03][352600224739954][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:55:03][352600224739954][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 15:55:03][352600224739954][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:55:03][352600224739954][357 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:55:03][352600224739954][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224739954\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-23 15:55:03][352600224739954][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:55:03][352600224739954][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224739954\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-23 15:55:07][352600224739954][4309 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c77e87c-2748-47f3-9560-98584c3e8b96","id":"QR_6c77e87c-2748-47f3-9560-98584c3e8b96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:55:07][352600224739954][4465 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-23 15:55:07][352600224739954][4465 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 15:55:07][352600224739954][4465 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:56:03][358558821572216][0 ms][INFO] === Request start === [2025-08-23 15:56:03][358558821572216][1 ms][DEBUG] START check_scloud [2025-08-23 15:56:03][358558821572216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:56:04][358558821572216][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 2408 17944 23834680 137652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:56:04][358558821572216][323 ms][DEBUG] targetPkg: running [2025-08-23 15:56:04][358558821572216][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-23 15:56:04][358558821572216][324 ms][DEBUG] START check_boot_completed [2025-08-23 15:56:04][358558821572216][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:56:04][358558821572216][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:56:04][358558821572216][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:56:04][358558821572216][417 ms][DEBUG] SU: done in 46 ms; out [2025-08-23 15:56:04][358558821572216][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 15:56:04][358558821572216][417 ms][DEBUG] START check_internet [2025-08-23 15:56:04][358558821572216][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:56:04][358558821572216][870 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.933/202.933/202.933/0.000 ms\n [2025-08-23 15:56:04][358558821572216][870 ms][DEBUG] check_internet: online [2025-08-23 15:56:04][358558821572216][870 ms][DEBUG] END check_internet in 453 ms [2025-08-23 15:56:04][358558821572216][870 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:56:04][358558821572216][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558821572216\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7714\"}'\'' -e'"" [2025-08-23 15:56:04][358558821572216][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:56:04][358558821572216][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558821572216\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7714\"}'\'' -e'"" [2025-08-23 15:56:08][358558821572216][4916 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34eb7e08-313e-4fca-8472-af58de7e89ad","id":"QR_34eb7e08-313e-4fca-8472-af58de7e89ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:56:08][358558821572216][5072 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-23 15:56:08][358558821572216][5072 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 15:56:08][358558821572216][5072 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:56:11][352736910648206][1 ms][INFO] === Request start === [2025-08-23 15:56:11][352736910648206][1 ms][DEBUG] START check_scloud [2025-08-23 15:56:11][352736910648206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:56:11][352736910648206][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 2408 17944 23961716 149468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:56:11][352736910648206][300 ms][DEBUG] targetPkg: running [2025-08-23 15:56:11][352736910648206][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 15:56:11][352736910648206][300 ms][DEBUG] START check_boot_completed [2025-08-23 15:56:11][352736910648206][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:56:11][352736910648206][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 15:56:11][352736910648206][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:56:11][352736910648206][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 15:56:11][352736910648206][392 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 15:56:11][352736910648206][392 ms][DEBUG] START check_internet [2025-08-23 15:56:11][352736910648206][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:56:12][352736910648206][657 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.531/144.531/144.531/0.000 ms\n [2025-08-23 15:56:12][352736910648206][657 ms][DEBUG] check_internet: online [2025-08-23 15:56:12][352736910648206][657 ms][DEBUG] END check_internet in 265 ms [2025-08-23 15:56:12][352736910648206][657 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:56:12][352736910648206][657 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910648206\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3253\"}'\'' -e'"" [2025-08-23 15:56:12][352736910648206][658 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:56:12][352736910648206][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910648206\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3253\"}'\'' -e'"" [2025-08-23 15:56:15][352736910648206][4156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f743aa56-d507-45ba-a5a6-c2506c567d08","id":"QR_f743aa56-d507-45ba-a5a6-c2506c567d08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:56:15][352736910648206][4312 ms][DEBUG] proc_open done in 3654 ms; code=255; res.len=3343 [2025-08-23 15:56:15][352736910648206][4312 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 15:56:15][352736910648206][4312 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:57:03][352288964532738][1 ms][INFO] === Request start === [2025-08-23 15:57:03][352288964532738][1 ms][DEBUG] START check_scloud [2025-08-23 15:57:03][352288964532738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:57:03][352288964532738][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 2408 17944 24127504 160464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:57:03][352288964532738][310 ms][DEBUG] targetPkg: running [2025-08-23 15:57:03][352288964532738][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:57:03][352288964532738][310 ms][DEBUG] START check_boot_completed [2025-08-23 15:57:03][352288964532738][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:57:03][352288964532738][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:57:03][352288964532738][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:57:03][352288964532738][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:57:03][352288964532738][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:57:03][352288964532738][419 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:57:03][352288964532738][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964532738\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9808\"}'\'' -e'"" [2025-08-23 15:57:03][352288964532738][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:57:03][352288964532738][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964532738\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9808\"}'\'' -e'"" [2025-08-23 15:57:07][352288964532738][4433 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58709f53-80f6-4d47-942c-2d8d7a8717fb","id":"QR_58709f53-80f6-4d47-942c-2d8d7a8717fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:57:07][352288964532738][4590 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 15:57:07][352288964532738][4590 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-23 15:57:07][352288964532738][4590 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:57:10][355195307952860][0 ms][INFO] === Request start === [2025-08-23 15:57:10][355195307952860][1 ms][DEBUG] START check_scloud [2025-08-23 15:57:10][355195307952860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:57:10][355195307952860][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 2408 17944 24275160 172220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:57:10][355195307952860][310 ms][DEBUG] targetPkg: running [2025-08-23 15:57:10][355195307952860][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 15:57:10][355195307952860][310 ms][DEBUG] START check_boot_completed [2025-08-23 15:57:10][355195307952860][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:57:10][355195307952860][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:57:10][355195307952860][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:57:10][355195307952860][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:57:10][355195307952860][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:57:10][355195307952860][419 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:57:10][355195307952860][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195307952860\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-08-23 15:57:10][355195307952860][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:57:10][355195307952860][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195307952860\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-08-23 15:57:14][355195307952860][4496 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4616a562-c0b7-4c46-830f-3b778187b9da","id":"QR_4616a562-c0b7-4c46-830f-3b778187b9da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:57:14][355195307952860][4652 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 15:57:14][355195307952860][4652 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 15:57:14][355195307952860][4652 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:57:16][351351023321492][0 ms][INFO] === Request start === [2025-08-23 15:57:16][351351023321492][1 ms][DEBUG] START check_scloud [2025-08-23 15:57:16][351351023321492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:57:16][351351023321492][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 2408 17944 24399328 183008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:57:16][351351023321492][309 ms][DEBUG] targetPkg: running [2025-08-23 15:57:16][351351023321492][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 15:57:16][351351023321492][309 ms][DEBUG] START check_boot_completed [2025-08-23 15:57:16][351351023321492][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:57:16][351351023321492][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:57:16][351351023321492][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:57:17][351351023321492][465 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 15:57:17][351351023321492][465 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-23 15:57:17][351351023321492][465 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:57:17][351351023321492][465 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023321492\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3140\"}'\'' -e'"" [2025-08-23 15:57:17][351351023321492][465 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:57:17][351351023321492][465 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023321492\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3140\"}'\'' -e'"" [2025-08-23 15:57:20][351351023321492][4167 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccbba82a-6040-462f-8bb3-c0d10a26682c","id":"QR_ccbba82a-6040-462f-8bb3-c0d10a26682c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:57:20][351351023321492][4323 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 15:57:20][351351023321492][4323 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 15:57:20][351351023321492][4323 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:58:04][359496124846590][0 ms][INFO] === Request start === [2025-08-23 15:58:04][359496124846590][1 ms][DEBUG] START check_scloud [2025-08-23 15:58:04][359496124846590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:58:04][359496124846590][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 2408 17944 24500860 195144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:58:04][359496124846590][264 ms][DEBUG] targetPkg: running [2025-08-23 15:58:04][359496124846590][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-23 15:58:04][359496124846590][264 ms][DEBUG] START check_boot_completed [2025-08-23 15:58:04][359496124846590][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:58:05][359496124846590][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 15:58:05][359496124846590][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:58:05][359496124846590][389 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 15:58:05][359496124846590][389 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 15:58:05][359496124846590][389 ms][DEBUG] START check_internet [2025-08-23 15:58:05][359496124846590][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.124/258.124/258.124/0.000 ms\n [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] check_internet: online [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] END check_internet in 391 ms [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:58:05][359496124846590][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496124846590\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:58:05][359496124846590][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496124846590\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-08-23 15:58:10][359496124846590][6247 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b50c66d9-e95f-44d3-8313-60e463313203","id":"QR_b50c66d9-e95f-44d3-8313-60e463313203","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:58:11][359496124846590][6403 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-23 15:58:11][359496124846590][6403 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-23 15:58:11][359496124846590][6403 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:58:15][352737400388204][1 ms][INFO] === Request start === [2025-08-23 15:58:15][352737400388204][1 ms][DEBUG] START check_scloud [2025-08-23 15:58:15][352737400388204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:58:15][352737400388204][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 2408 17944 24667396 206308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:58:15][352737400388204][306 ms][DEBUG] targetPkg: running [2025-08-23 15:58:15][352737400388204][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 15:58:15][352737400388204][306 ms][DEBUG] START check_boot_completed [2025-08-23 15:58:15][352737400388204][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:58:15][352737400388204][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:58:15][352737400388204][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:58:15][352737400388204][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 15:58:15][352737400388204][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 15:58:15][352737400388204][416 ms][DEBUG] START check_internet [2025-08-23 15:58:15][352737400388204][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:58:16][352737400388204][775 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.265/242.265/242.265/0.000 ms\n [2025-08-23 15:58:16][352737400388204][775 ms][DEBUG] check_internet: online [2025-08-23 15:58:16][352737400388204][775 ms][DEBUG] END check_internet in 360 ms [2025-08-23 15:58:16][352737400388204][775 ms][DEBUG] rawBody.length=1148 [2025-08-23 15:58:16][352737400388204][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737400388204\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8557\"}'\'' -e'"" [2025-08-23 15:58:16][352737400388204][775 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:58:16][352737400388204][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737400388204\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8557\"}'\'' -e'"" [2025-08-23 15:58:20][352737400388204][4836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42aa2199-20bf-4575-bca0-01b04afad4e0","id":"QR_42aa2199-20bf-4575-bca0-01b04afad4e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:58:20][352737400388204][4992 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-23 15:58:20][352737400388204][4993 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-23 15:58:20][352737400388204][4993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 15:58:23][356927266431398][0 ms][INFO] === Request start === [2025-08-23 15:58:23][356927266431398][1 ms][DEBUG] START check_scloud [2025-08-23 15:58:23][356927266431398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 15:58:23][356927266431398][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 2408 17944 24848908 217084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 15:58:23][356927266431398][279 ms][DEBUG] targetPkg: running [2025-08-23 15:58:23][356927266431398][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-23 15:58:23][356927266431398][279 ms][DEBUG] START check_boot_completed [2025-08-23 15:58:23][356927266431398][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 15:58:23][356927266431398][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 15:58:23][356927266431398][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 15:58:23][356927266431398][374 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 15:58:23][356927266431398][374 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 15:58:23][356927266431398][374 ms][DEBUG] START check_internet [2025-08-23 15:58:23][356927266431398][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 15:58:24][356927266431398][622 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.925/144.925/144.925/0.000 ms\n [2025-08-23 15:58:24][356927266431398][623 ms][DEBUG] check_internet: online [2025-08-23 15:58:24][356927266431398][623 ms][DEBUG] END check_internet in 248 ms [2025-08-23 15:58:24][356927266431398][623 ms][DEBUG] rawBody.length=1149 [2025-08-23 15:58:24][356927266431398][623 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266431398\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2161\"}'\'' -e'"" [2025-08-23 15:58:24][356927266431398][623 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 15:58:24][356927266431398][623 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266431398\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2161\"}'\'' -e'"" [2025-08-23 15:58:28][356927266431398][5465 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59b14ff8-d0a6-42b8-966c-ea28d86ccb40","id":"QR_59b14ff8-d0a6-42b8-966c-ea28d86ccb40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 15:58:29][356927266431398][5621 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-23 15:58:29][356927266431398][5621 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-23 15:58:29][356927266431398][5621 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:03:05][352226310356436][1 ms][INFO] === Request start === [2025-08-23 16:03:05][352226310356436][1 ms][DEBUG] START check_scloud [2025-08-23 16:03:05][352226310356436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:03:05][352226310356436][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 2408 17944 24945248 229368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:03:05][352226310356436][315 ms][DEBUG] targetPkg: running [2025-08-23 16:03:05][352226310356436][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 16:03:05][352226310356436][316 ms][DEBUG] START check_boot_completed [2025-08-23 16:03:05][352226310356436][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:03:05][352226310356436][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:03:05][352226310356436][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:03:05][352226310356436][456 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 16:03:05][352226310356436][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:03:05][352226310356436][456 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:03:05][352226310356436][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352226310356436\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-08-23 16:03:05][352226310356436][456 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:03:05][352226310356436][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352226310356436\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-08-23 16:03:11][352226310356436][5892 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6faab54b-3019-4e6b-8b87-53dfa8169fbe","id":"QR_6faab54b-3019-4e6b-8b87-53dfa8169fbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:03:11][352226310356436][6048 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-23 16:03:11][352226310356436][6048 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-23 16:03:11][352226310356436][6048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:08:04][355241321095250][1 ms][INFO] === Request start === [2025-08-23 16:08:04][355241321095250][1 ms][DEBUG] START check_scloud [2025-08-23 16:08:04][355241321095250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:08:05][355241321095250][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 2408 17944 25066148 228896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:08:05][355241321095250][307 ms][DEBUG] targetPkg: running [2025-08-23 16:08:05][355241321095250][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 16:08:05][355241321095250][307 ms][DEBUG] START check_boot_completed [2025-08-23 16:08:05][355241321095250][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:08:05][355241321095250][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:08:05][355241321095250][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:08:05][355241321095250][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:08:05][355241321095250][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:08:05][355241321095250][385 ms][DEBUG] START check_internet [2025-08-23 16:08:05][355241321095250][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.354/203.354/203.354/0.000 ms\n [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] check_internet: online [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] END check_internet in 578 ms [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:08:05][355241321095250][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4317\"}'\'' -e'"" [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:08:05][355241321095250][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4317\"}'\'' -e'"" [2025-08-23 16:08:09][355241321095250][4978 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 16:08:09][355241321095250][4978 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-23 16:08:09][355241321095250][4978 ms][WARN] Detected error: Process with pid 2408 either refused to load frida-agent, or terminated during injection [2025-08-23 16:08:09][355241321095250][4978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:08:09][355241321095250][5149 ms][DEBUG] SU: done in 171 ms; out [2025-08-23 16:08:09][355241321095250][5149 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:08:09][355241321095250][5150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:08:10][355241321095250][5290 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 16:08:10][355241321095250][5290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:08:10][355241321095250][5446 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:08:12][355241321095250][7461 ms][DEBUG] START check_boot_completed [2025-08-23 16:08:12][355241321095250][7461 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:08:12][355241321095250][7508 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:08:12][355241321095250][7508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:08:12][355241321095250][7555 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:08:12][355241321095250][7555 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:08:15][355241321095250][10570 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:08:15][355241321095250][10570 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4317\"}'\'' -e'"" [2025-08-23 16:08:19][355241321095250][14350 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:08:19][355241321095250][14506 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-23 16:08:19][355241321095250][14506 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-08-23 16:08:19][355241321095250][14506 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:08:19][][0 ms][INFO] === Request start === [2025-08-23 16:08:19][][1 ms][DEBUG] START check_scloud [2025-08-23 16:08:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:08:20][][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 4858 17944 23803148 123644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:08:20][][290 ms][DEBUG] targetPkg: running [2025-08-23 16:08:20][][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 16:08:20][][290 ms][DEBUG] START check_boot_completed [2025-08-23 16:08:20][][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:08:20][][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:08:20][][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:08:20][][384 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 16:08:20][][385 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 16:08:20][][385 ms][DEBUG] START check_internet [2025-08-23 16:08:20][][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:08:20][][633 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.964/147.964/147.964/0.000 ms\n [2025-08-23 16:08:20][][633 ms][DEBUG] check_internet: online [2025-08-23 16:08:20][][633 ms][DEBUG] END check_internet in 249 ms [2025-08-23 16:08:20][][634 ms][DEBUG] rawBody.length=1129 [2025-08-23 16:08:20][][634 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX21CNPRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4537\"}'\'' -e'"" [2025-08-23 16:08:20][][634 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:08:20][][634 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX21CNPRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4537\"}'\'' -e'"" [2025-08-23 16:08:23][][4007 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:08:23][][4164 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-23 16:08:23][][4164 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-23 16:08:23][][4164 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:08:25][355241321095250][0 ms][INFO] === Request start === [2025-08-23 16:08:25][355241321095250][1 ms][DEBUG] START check_scloud [2025-08-23 16:08:25][355241321095250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:08:26][355241321095250][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4858 17944 23971348 135304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:08:26][355241321095250][300 ms][DEBUG] targetPkg: running [2025-08-23 16:08:26][355241321095250][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 16:08:26][355241321095250][300 ms][DEBUG] START check_boot_completed [2025-08-23 16:08:26][355241321095250][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:08:26][355241321095250][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:08:26][355241321095250][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:08:26][355241321095250][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:08:26][355241321095250][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:08:26][355241321095250][394 ms][DEBUG] START check_internet [2025-08-23 16:08:26][355241321095250][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:08:26][355241321095250][628 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.966/136.966/136.966/0.000 ms\n [2025-08-23 16:08:26][355241321095250][628 ms][DEBUG] check_internet: online [2025-08-23 16:08:26][355241321095250][628 ms][DEBUG] END check_internet in 235 ms [2025-08-23 16:08:26][355241321095250][628 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:08:26][355241321095250][628 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9205\"}'\'' -e'"" [2025-08-23 16:08:26][355241321095250][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:08:26][355241321095250][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9205\"}'\'' -e'"" [2025-08-23 16:08:31][355241321095250][5814 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3034a0e8-e13d-436c-bd3f-059abf989eba","id":"QR_3034a0e8-e13d-436c-bd3f-059abf989eba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:08:31][355241321095250][5971 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-23 16:08:31][355241321095250][5971 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-23 16:08:31][355241321095250][5971 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:09:03][352288960521552][0 ms][INFO] === Request start === [2025-08-23 16:09:03][352288960521552][1 ms][DEBUG] START check_scloud [2025-08-23 16:09:03][352288960521552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:09:03][352288960521552][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 4858 17944 24018436 149364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:09:03][352288960521552][323 ms][DEBUG] targetPkg: running [2025-08-23 16:09:03][352288960521552][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 16:09:03][352288960521552][323 ms][DEBUG] START check_boot_completed [2025-08-23 16:09:03][352288960521552][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:09:03][352288960521552][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:09:03][352288960521552][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:09:03][352288960521552][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:09:03][352288960521552][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:09:03][352288960521552][416 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:09:03][352288960521552][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960521552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6486\"}'\'' -e'"" [2025-08-23 16:09:03][352288960521552][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:09:03][352288960521552][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960521552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6486\"}'\'' -e'"" [2025-08-23 16:09:07][352288960521552][4493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_462e83c6-55b4-4833-a94f-0b5caf930b05","id":"QR_462e83c6-55b4-4833-a94f-0b5caf930b05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:09:07][352288960521552][4649 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 16:09:07][352288960521552][4650 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 16:09:07][352288960521552][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:09:10][351234160754768][0 ms][INFO] === Request start === [2025-08-23 16:09:10][351234160754768][1 ms][DEBUG] START check_scloud [2025-08-23 16:09:10][351234160754768][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:09:10][351234160754768][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4858 17944 24142476 160148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:09:10][351234160754768][302 ms][DEBUG] targetPkg: running [2025-08-23 16:09:10][351234160754768][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 16:09:10][351234160754768][302 ms][DEBUG] START check_boot_completed [2025-08-23 16:09:10][351234160754768][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:09:10][351234160754768][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:09:10][351234160754768][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:09:10][351234160754768][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:09:10][351234160754768][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:09:10][351234160754768][412 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:09:10][351234160754768][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160754768\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4691\"}'\'' -e'"" [2025-08-23 16:09:10][351234160754768][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:09:10][351234160754768][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160754768\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4691\"}'\'' -e'"" [2025-08-23 16:09:14][351234160754768][4410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c29a00b-b5ab-4461-80d8-ac0eea0c3121","id":"QR_4c29a00b-b5ab-4461-80d8-ac0eea0c3121","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:09:14][351234160754768][4566 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-23 16:09:14][351234160754768][4566 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 16:09:14][351234160754768][4567 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:11:03][353310803392899][1 ms][INFO] === Request start === [2025-08-23 16:11:03][353310803392899][1 ms][DEBUG] START check_scloud [2025-08-23 16:11:03][353310803392899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:11:03][353310803392899][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 4858 17944 24242816 171288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:11:03][353310803392899][289 ms][DEBUG] targetPkg: running [2025-08-23 16:11:03][353310803392899][289 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 16:11:03][353310803392899][289 ms][DEBUG] START check_boot_completed [2025-08-23 16:11:03][353310803392899][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:11:03][353310803392899][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:11:03][353310803392899][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:11:03][353310803392899][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:11:03][353310803392899][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:11:03][353310803392899][383 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:11:03][353310803392899][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803392899\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1359\"}'\'' -e'"" [2025-08-23 16:11:03][353310803392899][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:11:03][353310803392899][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803392899\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1359\"}'\'' -e'"" [2025-08-23 16:11:08][353310803392899][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_472b252f-c035-4f65-9ece-4105d41cc92f","id":"QR_472b252f-c035-4f65-9ece-4105d41cc92f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:11:08][353310803392899][4647 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 16:11:08][353310803392899][4647 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 16:11:08][353310803392899][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:12:02][354203113263166][0 ms][INFO] === Request start === [2025-08-23 16:12:02][354203113263166][1 ms][DEBUG] START check_scloud [2025-08-23 16:12:02][354203113263166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:12:02][354203113263166][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 4858 17944 24352548 183188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:12:02][354203113263166][309 ms][DEBUG] targetPkg: running [2025-08-23 16:12:02][354203113263166][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 16:12:02][354203113263166][309 ms][DEBUG] START check_boot_completed [2025-08-23 16:12:02][354203113263166][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:12:02][354203113263166][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:12:02][354203113263166][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:12:02][354203113263166][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 16:12:02][354203113263166][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 16:12:02][354203113263166][405 ms][DEBUG] START check_internet [2025-08-23 16:12:02][354203113263166][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:12:02][354203113263166][887 ms][DEBUG] SU: done in 482 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.764/201.764/201.764/0.000 ms\n [2025-08-23 16:12:02][354203113263166][887 ms][DEBUG] check_internet: online [2025-08-23 16:12:02][354203113263166][887 ms][DEBUG] END check_internet in 483 ms [2025-08-23 16:12:02][354203113263166][887 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:12:02][354203113263166][887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8408\"}'\'' -e'"" [2025-08-23 16:12:02][354203113263166][887 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:12:02][354203113263166][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203113263166\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8408\"}'\'' -e'"" [2025-08-23 16:12:06][354203113263166][4542 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:12:06][354203113263166][4698 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-23 16:12:06][354203113263166][4698 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 16:12:06][354203113263166][4698 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:12:07][][0 ms][INFO] === Request start === [2025-08-23 16:12:07][][1 ms][DEBUG] START check_scloud [2025-08-23 16:12:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:12:07][][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 4858 17944 24507308 194232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:12:07][][305 ms][DEBUG] targetPkg: running [2025-08-23 16:12:07][][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 16:12:07][][306 ms][DEBUG] START check_boot_completed [2025-08-23 16:12:07][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:12:07][][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:12:07][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:12:07][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:12:07][][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:12:07][][399 ms][DEBUG] START check_internet [2025-08-23 16:12:07][][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:12:07][][649 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.165/143.165/143.165/0.000 ms\n [2025-08-23 16:12:07][][649 ms][DEBUG] check_internet: online [2025-08-23 16:12:07][][649 ms][DEBUG] END check_internet in 250 ms [2025-08-23 16:12:07][][649 ms][DEBUG] rawBody.length=1129 [2025-08-23 16:12:07][][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN308P36L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6299\"}'\'' -e'"" [2025-08-23 16:12:07][][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:12:07][][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN308P36L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6299\"}'\'' -e'"" [2025-08-23 16:12:11][][4367 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:12:11][][4523 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=107 [2025-08-23 16:12:11][][4523 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 16:12:11][][4523 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:13:04][355738551768456][1 ms][INFO] === Request start === [2025-08-23 16:13:04][355738551768456][1 ms][DEBUG] START check_scloud [2025-08-23 16:13:04][355738551768456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:13:04][355738551768456][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 4858 17944 24610924 206612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:13:04][355738551768456][300 ms][DEBUG] targetPkg: running [2025-08-23 16:13:04][355738551768456][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 16:13:04][355738551768456][300 ms][DEBUG] START check_boot_completed [2025-08-23 16:13:04][355738551768456][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:13:04][355738551768456][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:13:04][355738551768456][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:13:04][355738551768456][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:13:04][355738551768456][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:13:04][355738551768456][393 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:13:04][355738551768456][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738551768456\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8490\"}'\'' -e'"" [2025-08-23 16:13:04][355738551768456][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:13:04][355738551768456][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738551768456\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8490\"}'\'' -e'"" [2025-08-23 16:13:10][355738551768456][5564 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81b646a0-cc35-42b7-bb84-9c59a1970c62","id":"QR_81b646a0-cc35-42b7-bb84-9c59a1970c62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:13:10][355738551768456][5720 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 16:13:10][355738551768456][5720 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-23 16:13:10][355738551768456][5720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:13:15][356722917500919][0 ms][INFO] === Request start === [2025-08-23 16:13:15][356722917500919][1 ms][DEBUG] START check_scloud [2025-08-23 16:13:15][356722917500919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:13:16][356722917500919][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 4858 17944 24787700 217256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:13:16][356722917500919][299 ms][DEBUG] targetPkg: running [2025-08-23 16:13:16][356722917500919][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 16:13:16][356722917500919][299 ms][DEBUG] START check_boot_completed [2025-08-23 16:13:16][356722917500919][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:13:16][356722917500919][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:13:16][356722917500919][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:13:16][356722917500919][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:13:16][356722917500919][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:13:16][356722917500919][392 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:13:16][356722917500919][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917500919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9831\"}'\'' -e'"" [2025-08-23 16:13:16][356722917500919][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:13:16][356722917500919][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917500919\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9831\"}'\'' -e'"" [2025-08-23 16:13:21][356722917500919][6000 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43d5584e-e003-44c0-bf37-7b196c5a6066","id":"QR_43d5584e-e003-44c0-bf37-7b196c5a6066","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:13:21][356722917500919][6157 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-08-23 16:13:21][356722917500919][6157 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-08-23 16:13:21][356722917500919][6157 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:15:04][350330051639828][0 ms][INFO] === Request start === [2025-08-23 16:15:04][350330051639828][1 ms][DEBUG] START check_scloud [2025-08-23 16:15:04][350330051639828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:15:04][350330051639828][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 4858 17944 24922036 229056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:15:04][350330051639828][304 ms][DEBUG] targetPkg: running [2025-08-23 16:15:04][350330051639828][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 16:15:04][350330051639828][305 ms][DEBUG] START check_boot_completed [2025-08-23 16:15:04][350330051639828][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:15:04][350330051639828][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:15:04][350330051639828][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:15:04][350330051639828][445 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 16:15:04][350330051639828][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:15:04][350330051639828][445 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:15:04][350330051639828][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051639828\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-23 16:15:04][350330051639828][445 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:15:04][350330051639828][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051639828\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-23 16:15:09][350330051639828][4881 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a2675e5-5dfb-479b-aaa7-8c075ec01584","id":"QR_6a2675e5-5dfb-479b-aaa7-8c075ec01584","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:15:09][350330051639828][5037 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 16:15:09][350330051639828][5038 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 16:15:09][350330051639828][5038 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:16:04][357980445607064][1 ms][INFO] === Request start === [2025-08-23 16:16:04][357980445607064][1 ms][DEBUG] START check_scloud [2025-08-23 16:16:04][357980445607064][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:16:04][357980445607064][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 4858 17944 25058456 239748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:16:04][357980445607064][297 ms][DEBUG] targetPkg: running [2025-08-23 16:16:04][357980445607064][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 16:16:04][357980445607064][297 ms][DEBUG] START check_boot_completed [2025-08-23 16:16:04][357980445607064][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:16:04][357980445607064][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:16:04][357980445607064][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:16:05][357980445607064][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:16:05][357980445607064][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:16:05][357980445607064][390 ms][DEBUG] START check_internet [2025-08-23 16:16:05][357980445607064][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.242/202.242/202.242/0.000 ms\n [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] check_internet: online [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] END check_internet in 563 ms [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:16:05][357980445607064][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445607064\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3536\"}'\'' -e'"" [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:16:05][357980445607064][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445607064\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3536\"}'\'' -e'"" [2025-08-23 16:16:09][357980445607064][4577 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 16:16:09][357980445607064][4577 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-23 16:16:09][357980445607064][4577 ms][WARN] Detected error: Process with pid 4858 either refused to load frida-agent, or terminated during injection [2025-08-23 16:16:09][357980445607064][4577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:16:09][357980445607064][4733 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 16:16:09][357980445607064][4733 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:16:09][357980445607064][4733 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:16:09][357980445607064][4858 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 16:16:09][357980445607064][4858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:16:09][357980445607064][5045 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:16:11][357980445607064][7061 ms][DEBUG] START check_boot_completed [2025-08-23 16:16:11][357980445607064][7061 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:16:11][357980445607064][7108 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:16:11][357980445607064][7108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:16:11][357980445607064][7170 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:16:11][357980445607064][7170 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 16:16:14][357980445607064][10185 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:16:14][357980445607064][10185 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445607064\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3536\"}'\'' -e'"" [2025-08-23 16:16:20][357980445607064][15418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_157691e7-b51b-416c-8b7c-e0aecfc65ae8","id":"QR_157691e7-b51b-416c-8b7c-e0aecfc65ae8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:16:20][357980445607064][15574 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-08-23 16:16:20][357980445607064][15574 ms][DEBUG] END runCmdUntilRes#2 in 5390 ms [2025-08-23 16:16:20][357980445607064][15575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:18:05][354453180182993][1 ms][INFO] === Request start === [2025-08-23 16:18:05][354453180182993][1 ms][DEBUG] START check_scloud [2025-08-23 16:18:05][354453180182993][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:18:05][354453180182993][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 6330 17944 23710740 127212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:18:05][354453180182993][304 ms][DEBUG] targetPkg: running [2025-08-23 16:18:05][354453180182993][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 16:18:05][354453180182993][304 ms][DEBUG] START check_boot_completed [2025-08-23 16:18:05][354453180182993][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:18:05][354453180182993][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:18:05][354453180182993][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:18:05][354453180182993][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:18:05][354453180182993][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:18:05][354453180182993][413 ms][DEBUG] START check_internet [2025-08-23 16:18:05][354453180182993][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:18:05][354453180182993][772 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.837/240.837/240.837/0.000 ms\n [2025-08-23 16:18:05][354453180182993][772 ms][DEBUG] check_internet: online [2025-08-23 16:18:05][354453180182993][772 ms][DEBUG] END check_internet in 359 ms [2025-08-23 16:18:05][354453180182993][772 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:18:05][354453180182993][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354453180182993\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6126\"}'\'' -e'"" [2025-08-23 16:18:05][354453180182993][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:18:05][354453180182993][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354453180182993\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6126\"}'\'' -e'"" [2025-08-23 16:18:14][354453180182993][9301 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d94d0c68-d6ea-4735-81d2-4ab31d871473","id":"QR_d94d0c68-d6ea-4735-81d2-4ab31d871473","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:18:14][354453180182993][9458 ms][DEBUG] proc_open done in 8685 ms; code=255; res.len=3343 [2025-08-23 16:18:14][354453180182993][9458 ms][DEBUG] END runCmdUntilRes#1 in 8685 ms [2025-08-23 16:18:14][354453180182993][9458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:18:19][352288965799500][0 ms][INFO] === Request start === [2025-08-23 16:18:19][352288965799500][1 ms][DEBUG] START check_scloud [2025-08-23 16:18:19][352288965799500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:18:20][352288965799500][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 6330 17944 23890852 137864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:18:20][352288965799500][308 ms][DEBUG] targetPkg: running [2025-08-23 16:18:20][352288965799500][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 16:18:20][352288965799500][308 ms][DEBUG] START check_boot_completed [2025-08-23 16:18:20][352288965799500][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:18:20][352288965799500][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:18:20][352288965799500][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:18:20][352288965799500][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:18:20][352288965799500][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:18:20][352288965799500][402 ms][DEBUG] START check_internet [2025-08-23 16:18:20][352288965799500][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.237/248.237/248.237/0.000 ms\n [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] check_internet: online [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] END check_internet in 361 ms [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:18:20][352288965799500][763 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288965799500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8813\"}'\'' -e'"" [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:18:20][352288965799500][763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288965799500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8813\"}'\'' -e'"" [2025-08-23 16:18:24][352288965799500][4760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19ba5cdb-9b81-40d5-bfd8-bc5da7f4ab45","id":"QR_19ba5cdb-9b81-40d5-bfd8-bc5da7f4ab45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:18:24][352288965799500][4916 ms][DEBUG] proc_open done in 4153 ms; code=255; res.len=3343 [2025-08-23 16:18:24][352288965799500][4916 ms][DEBUG] END runCmdUntilRes#1 in 4153 ms [2025-08-23 16:18:24][352288965799500][4916 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:20:03][357967976922509][1 ms][INFO] === Request start === [2025-08-23 16:20:03][357967976922509][1 ms][DEBUG] START check_scloud [2025-08-23 16:20:03][357967976922509][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:20:04][357967976922509][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 6330 17944 23986844 149824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:20:04][357967976922509][307 ms][DEBUG] targetPkg: running [2025-08-23 16:20:04][357967976922509][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 16:20:04][357967976922509][307 ms][DEBUG] START check_boot_completed [2025-08-23 16:20:04][357967976922509][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:20:04][357967976922509][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:20:04][357967976922509][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:20:04][357967976922509][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:20:04][357967976922509][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:20:04][357967976922509][416 ms][DEBUG] START check_internet [2025-08-23 16:20:04][357967976922509][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.321/211.321/211.321/0.000 ms\n [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] check_internet: online [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] END check_internet in 330 ms [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:20:04][357967976922509][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976922509\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2028\"}'\'' -e'"" [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:20:04][357967976922509][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976922509\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2028\"}'\'' -e'"" [2025-08-23 16:20:08][357967976922509][4837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59b78a2b-800c-4987-9d74-70271c2b76be","id":"QR_59b78a2b-800c-4987-9d74-70271c2b76be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:20:08][357967976922509][4993 ms][DEBUG] proc_open done in 4247 ms; code=255; res.len=3343 [2025-08-23 16:20:08][357967976922509][4993 ms][DEBUG] END runCmdUntilRes#1 in 4247 ms [2025-08-23 16:20:08][357967976922509][4993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:20:11][353628425891851][0 ms][INFO] === Request start === [2025-08-23 16:20:11][353628425891851][1 ms][DEBUG] START check_scloud [2025-08-23 16:20:11][353628425891851][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:20:12][353628425891851][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 6330 17944 24139620 160892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:20:12][353628425891851][297 ms][DEBUG] targetPkg: running [2025-08-23 16:20:12][353628425891851][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 16:20:12][353628425891851][297 ms][DEBUG] START check_boot_completed [2025-08-23 16:20:12][353628425891851][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:20:12][353628425891851][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:20:12][353628425891851][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:20:12][353628425891851][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:20:12][353628425891851][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:20:12][353628425891851][406 ms][DEBUG] START check_internet [2025-08-23 16:20:12][353628425891851][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:20:12][353628425891851][796 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.230/132.230/132.230/0.000 ms\n [2025-08-23 16:20:12][353628425891851][797 ms][DEBUG] check_internet: online [2025-08-23 16:20:12][353628425891851][797 ms][DEBUG] END check_internet in 391 ms [2025-08-23 16:20:12][353628425891851][797 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:20:12][353628425891851][797 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425891851\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9299\"}'\'' -e'"" [2025-08-23 16:20:12][353628425891851][797 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:20:12][353628425891851][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425891851\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9299\"}'\'' -e'"" [2025-08-23 16:20:16][353628425891851][4327 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f74704ec-4500-47f5-8922-c0cc990b0563","id":"QR_f74704ec-4500-47f5-8922-c0cc990b0563","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:20:16][353628425891851][4483 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-23 16:20:16][353628425891851][4483 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-23 16:20:16][353628425891851][4483 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:20:20][351672491135647][0 ms][INFO] === Request start === [2025-08-23 16:20:20][351672491135647][1 ms][DEBUG] START check_scloud [2025-08-23 16:20:20][351672491135647][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:20:20][351672491135647][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 6330 17944 24280044 171732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:20:20][351672491135647][272 ms][DEBUG] targetPkg: running [2025-08-23 16:20:20][351672491135647][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 16:20:20][351672491135647][273 ms][DEBUG] START check_boot_completed [2025-08-23 16:20:20][351672491135647][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:20:20][351672491135647][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:20:20][351672491135647][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:20:20][351672491135647][368 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 16:20:20][351672491135647][368 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 16:20:20][351672491135647][368 ms][DEBUG] START check_internet [2025-08-23 16:20:20][351672491135647][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:20:21][351672491135647][663 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.252/145.252/145.252/0.000 ms\n [2025-08-23 16:20:21][351672491135647][663 ms][DEBUG] check_internet: online [2025-08-23 16:20:21][351672491135647][663 ms][DEBUG] END check_internet in 295 ms [2025-08-23 16:20:21][351672491135647][663 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:20:21][351672491135647][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491135647\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8681\"}'\'' -e'"" [2025-08-23 16:20:21][351672491135647][664 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:20:21][351672491135647][664 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491135647\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8681\"}'\'' -e'"" [2025-08-23 16:20:26][351672491135647][5958 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c2f7773-ebe3-4fcb-b11d-d75d9e48362b","id":"QR_3c2f7773-ebe3-4fcb-b11d-d75d9e48362b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:20:26][351672491135647][6115 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-08-23 16:20:26][351672491135647][6115 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-08-23 16:20:26][351672491135647][6115 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:22:02][352549938797156][0 ms][INFO] === Request start === [2025-08-23 16:22:02][352549938797156][1 ms][DEBUG] START check_scloud [2025-08-23 16:22:02][352549938797156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:22:03][352549938797156][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 6330 17944 24381576 183932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:22:03][352549938797156][312 ms][DEBUG] targetPkg: running [2025-08-23 16:22:03][352549938797156][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 16:22:03][352549938797156][313 ms][DEBUG] START check_boot_completed [2025-08-23 16:22:03][352549938797156][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:22:03][352549938797156][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:22:03][352549938797156][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:22:03][352549938797156][453 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 16:22:03][352549938797156][453 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:22:03][352549938797156][453 ms][DEBUG] START check_internet [2025-08-23 16:22:03][352549938797156][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:22:03][352549938797156][765 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.548/186.548/186.548/0.000 ms\n [2025-08-23 16:22:03][352549938797156][765 ms][DEBUG] check_internet: online [2025-08-23 16:22:03][352549938797156][765 ms][DEBUG] END check_internet in 312 ms [2025-08-23 16:22:03][352549938797156][766 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:22:03][352549938797156][766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938797156\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5255\"}'\'' -e'"" [2025-08-23 16:22:03][352549938797156][766 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:22:03][352549938797156][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938797156\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5255\"}'\'' -e'"" [2025-08-23 16:22:07][352549938797156][4983 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_908f83b2-a8b9-47a5-9ae4-a03277b047d4","id":"QR_908f83b2-a8b9-47a5-9ae4-a03277b047d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:22:08][352549938797156][5139 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 16:22:08][352549938797156][5139 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 16:22:08][352549938797156][5139 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:23:02][350572364911812][1 ms][INFO] === Request start === [2025-08-23 16:23:02][350572364911812][1 ms][DEBUG] START check_scloud [2025-08-23 16:23:02][350572364911812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:23:03][350572364911812][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 6330 17944 24524012 194964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:23:03][350572364911812][298 ms][DEBUG] targetPkg: running [2025-08-23 16:23:03][350572364911812][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 16:23:03][350572364911812][298 ms][DEBUG] START check_boot_completed [2025-08-23 16:23:03][350572364911812][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:23:03][350572364911812][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:23:03][350572364911812][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:23:03][350572364911812][423 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 16:23:03][350572364911812][423 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 16:23:03][350572364911812][423 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:23:03][350572364911812][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5191\"}'\'' -e'"" [2025-08-23 16:23:03][350572364911812][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:23:03][350572364911812][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5191\"}'\'' -e'"" [2025-08-23 16:23:07][350572364911812][4297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93baddb6-0c2e-4867-9b9b-6d5256cd8a66","id":"QR_93baddb6-0c2e-4867-9b9b-6d5256cd8a66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:23:07][350572364911812][4453 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 16:23:07][350572364911812][4453 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 16:23:07][350572364911812][4453 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:24:03][353684141746309][1 ms][INFO] === Request start === [2025-08-23 16:24:03][353684141746309][1 ms][DEBUG] START check_scloud [2025-08-23 16:24:03][353684141746309][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:24:03][353684141746309][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 6330 17944 24648016 207432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:24:03][353684141746309][300 ms][DEBUG] targetPkg: running [2025-08-23 16:24:03][353684141746309][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 16:24:03][353684141746309][300 ms][DEBUG] START check_boot_completed [2025-08-23 16:24:03][353684141746309][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:24:03][353684141746309][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:24:03][353684141746309][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:24:03][353684141746309][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:24:03][353684141746309][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:24:03][353684141746309][394 ms][DEBUG] START check_internet [2025-08-23 16:24:03][353684141746309][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.949/189.949/189.949/0.000 ms\n [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] check_internet: online [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] END check_internet in 297 ms [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:24:04][353684141746309][691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141746309\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7720\"}'\'' -e'"" [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:24:04][353684141746309][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141746309\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7720\"}'\'' -e'"" [2025-08-23 16:24:08][353684141746309][4690 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c444aef-1621-4b62-8ce0-c91a0ffed488","id":"QR_5c444aef-1621-4b62-8ce0-c91a0ffed488","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:24:08][353684141746309][4846 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-23 16:24:08][353684141746309][4846 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-23 16:24:08][353684141746309][4846 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:24:12][358080591464912][0 ms][INFO] === Request start === [2025-08-23 16:24:12][358080591464912][1 ms][DEBUG] START check_scloud [2025-08-23 16:24:12][358080591464912][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:24:12][358080591464912][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 6330 17944 24772120 217760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:24:12][358080591464912][311 ms][DEBUG] targetPkg: running [2025-08-23 16:24:12][358080591464912][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 16:24:12][358080591464912][311 ms][DEBUG] START check_boot_completed [2025-08-23 16:24:12][358080591464912][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:24:12][358080591464912][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:24:12][358080591464912][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:24:12][358080591464912][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:24:12][358080591464912][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:24:12][358080591464912][405 ms][DEBUG] START check_internet [2025-08-23 16:24:12][358080591464912][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.871/198.871/198.871/0.000 ms\n [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] check_internet: online [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] END check_internet in 313 ms [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:24:12][358080591464912][718 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591464912\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:24:12][358080591464912][718 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591464912\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-23 16:24:19][358080591464912][7200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdb1d476-c97a-4faf-af82-9a069ed944e4","id":"QR_bdb1d476-c97a-4faf-af82-9a069ed944e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:24:19][358080591464912][7356 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-08-23 16:24:19][358080591464912][7356 ms][DEBUG] END runCmdUntilRes#1 in 6638 ms [2025-08-23 16:24:19][358080591464912][7356 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:28:03][356533284128618][1 ms][INFO] === Request start === [2025-08-23 16:28:03][356533284128618][1 ms][DEBUG] START check_scloud [2025-08-23 16:28:03][356533284128618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:28:04][356533284128618][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 6330 17944 24904280 229436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:28:04][356533284128618][260 ms][DEBUG] targetPkg: running [2025-08-23 16:28:04][356533284128618][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-23 16:28:04][356533284128618][260 ms][DEBUG] START check_boot_completed [2025-08-23 16:28:04][356533284128618][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:28:04][356533284128618][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:28:04][356533284128618][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:28:04][356533284128618][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:28:04][356533284128618][339 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 16:28:04][356533284128618][339 ms][DEBUG] START check_internet [2025-08-23 16:28:04][356533284128618][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:28:04][356533284128618][838 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.188/201.188/201.188/0.000 ms\n [2025-08-23 16:28:04][356533284128618][838 ms][DEBUG] check_internet: online [2025-08-23 16:28:04][356533284128618][838 ms][DEBUG] END check_internet in 500 ms [2025-08-23 16:28:04][356533284128618][838 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:28:04][356533284128618][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356533284128618\",\"model\":\"SM-M536S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5366\"}'\'' -e'"" [2025-08-23 16:28:04][356533284128618][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:28:04][356533284128618][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356533284128618\",\"model\":\"SM-M536S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5366\"}'\'' -e'"" [2025-08-23 16:28:08][356533284128618][4900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3747929e-3e38-4171-82bd-f3692f2016f7","id":"QR_3747929e-3e38-4171-82bd-f3692f2016f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:28:08][356533284128618][5056 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-23 16:28:08][356533284128618][5056 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-23 16:28:08][356533284128618][5056 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:28:14][353246117134645][0 ms][INFO] === Request start === [2025-08-23 16:28:14][353246117134645][1 ms][DEBUG] START check_scloud [2025-08-23 16:28:14][353246117134645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:28:14][353246117134645][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 6330 17944 25053024 240416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:28:14][353246117134645][299 ms][DEBUG] targetPkg: running [2025-08-23 16:28:14][353246117134645][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 16:28:14][353246117134645][300 ms][DEBUG] START check_boot_completed [2025-08-23 16:28:14][353246117134645][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:28:14][353246117134645][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:28:14][353246117134645][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:28:14][353246117134645][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:28:14][353246117134645][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:28:14][353246117134645][409 ms][DEBUG] START check_internet [2025-08-23 16:28:14][353246117134645][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:28:15][353246117134645][768 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.880/223.880/223.880/0.000 ms\n [2025-08-23 16:28:15][353246117134645][769 ms][DEBUG] check_internet: online [2025-08-23 16:28:15][353246117134645][769 ms][DEBUG] END check_internet in 360 ms [2025-08-23 16:28:15][353246117134645][769 ms][DEBUG] rawBody.length=1159 [2025-08-23 16:28:15][353246117134645][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246117134645\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWA0DKSMW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8867\"}'\'' -e'"" [2025-08-23 16:28:15][353246117134645][769 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:28:15][353246117134645][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246117134645\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWA0DKSMW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8867\"}'\'' -e'"" [2025-08-23 16:28:19][353246117134645][4564 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 16:28:19][353246117134645][4564 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-23 16:28:19][353246117134645][4564 ms][WARN] Detected error: Process with pid 6330 either refused to load frida-agent, or terminated during injection [2025-08-23 16:28:19][353246117134645][4564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:28:19][353246117134645][4706 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 16:28:19][353246117134645][4706 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:28:19][353246117134645][4706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:28:19][353246117134645][4845 ms][DEBUG] SU: done in 139 ms; out [2025-08-23 16:28:19][353246117134645][4845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:28:19][353246117134645][4986 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:28:21][353246117134645][7001 ms][DEBUG] START check_boot_completed [2025-08-23 16:28:21][353246117134645][7001 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:28:21][353246117134645][7048 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:28:21][353246117134645][7048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:28:21][353246117134645][7110 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:28:21][353246117134645][7110 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 16:28:24][353246117134645][10125 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:28:24][353246117134645][10125 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246117134645\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWA0DKSMW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8867\"}'\'' -e'"" [2025-08-23 16:28:30][353246117134645][16358 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e62747c8-7219-46b6-a9ea-d493a9ba262d","id":"QR_e62747c8-7219-46b6-a9ea-d493a9ba262d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:28:31][353246117134645][16514 ms][DEBUG] proc_open done in 6389 ms; code=255; res.len=3343 [2025-08-23 16:28:31][353246117134645][16514 ms][DEBUG] END runCmdUntilRes#2 in 6389 ms [2025-08-23 16:28:31][353246117134645][16514 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:29:05][350274356562451][0 ms][INFO] === Request start === [2025-08-23 16:29:05][350274356562451][1 ms][DEBUG] START check_scloud [2025-08-23 16:29:05][350274356562451][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:29:05][350274356562451][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7858 17944 23674836 126988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:29:05][350274356562451][314 ms][DEBUG] targetPkg: running [2025-08-23 16:29:05][350274356562451][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 16:29:05][350274356562451][314 ms][DEBUG] START check_boot_completed [2025-08-23 16:29:05][350274356562451][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:29:05][350274356562451][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:29:05][350274356562451][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:29:05][350274356562451][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:29:05][350274356562451][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:29:05][350274356562451][423 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:29:05][350274356562451][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356562451\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6506\"}'\'' -e'"" [2025-08-23 16:29:05][350274356562451][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:29:05][350274356562451][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356562451\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6506\"}'\'' -e'"" [2025-08-23 16:29:11][350274356562451][6093 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f91d50a-bcf0-4bcc-8ac0-e83371d46157","id":"QR_7f91d50a-bcf0-4bcc-8ac0-e83371d46157","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:29:11][350274356562451][6250 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-23 16:29:11][350274356562451][6250 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-23 16:29:11][350274356562451][6250 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:29:16][357567911986633][0 ms][INFO] === Request start === [2025-08-23 16:29:16][357567911986633][1 ms][DEBUG] START check_scloud [2025-08-23 16:29:16][357567911986633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:29:16][357567911986633][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7858 17944 23805980 137660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:29:16][357567911986633][308 ms][DEBUG] targetPkg: running [2025-08-23 16:29:16][357567911986633][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 16:29:16][357567911986633][308 ms][DEBUG] START check_boot_completed [2025-08-23 16:29:16][357567911986633][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:29:16][357567911986633][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:29:16][357567911986633][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:29:16][357567911986633][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:29:16][357567911986633][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:29:16][357567911986633][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:29:16][357567911986633][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567911986633\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6983\"}'\'' -e'"" [2025-08-23 16:29:16][357567911986633][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:29:16][357567911986633][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567911986633\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6983\"}'\'' -e'"" [2025-08-23 16:29:20][357567911986633][4447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f3e4813-872d-4f05-9de8-1686c4fa8b43","id":"QR_4f3e4813-872d-4f05-9de8-1686c4fa8b43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:29:20][357567911986633][4603 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 16:29:20][357567911986633][4603 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 16:29:20][357567911986633][4603 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:30:05][351676560506018][1 ms][INFO] === Request start === [2025-08-23 16:30:05][351676560506018][1 ms][DEBUG] START check_scloud [2025-08-23 16:30:05][351676560506018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:30:05][351676560506018][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 7858 17944 23949340 149064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:30:05][351676560506018][267 ms][DEBUG] targetPkg: running [2025-08-23 16:30:05][351676560506018][268 ms][DEBUG] END check_scloud in 266 ms [2025-08-23 16:30:05][351676560506018][268 ms][DEBUG] START check_boot_completed [2025-08-23 16:30:05][351676560506018][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:30:05][351676560506018][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:30:05][351676560506018][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:30:05][351676560506018][408 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 16:30:05][351676560506018][408 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:30:05][351676560506018][408 ms][DEBUG] START check_internet [2025-08-23 16:30:05][351676560506018][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:30:05][351676560506018][736 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.074/209.074/209.074/0.000 ms\n [2025-08-23 16:30:05][351676560506018][736 ms][DEBUG] check_internet: online [2025-08-23 16:30:05][351676560506018][736 ms][DEBUG] END check_internet in 328 ms [2025-08-23 16:30:05][351676560506018][736 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:30:05][351676560506018][736 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676560506018\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3540\"}'\'' -e'"" [2025-08-23 16:30:05][351676560506018][737 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:30:05][351676560506018][737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676560506018\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3540\"}'\'' -e'"" [2025-08-23 16:30:11][351676560506018][6000 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_070996d6-1819-47ab-a15a-a9900db5fb78","id":"QR_070996d6-1819-47ab-a15a-a9900db5fb78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:30:11][351676560506018][6157 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-23 16:30:11][351676560506018][6157 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-23 16:30:11][351676560506018][6157 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:31:03][357260754081452][0 ms][INFO] === Request start === [2025-08-23 16:31:03][357260754081452][1 ms][DEBUG] START check_scloud [2025-08-23 16:31:03][357260754081452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:31:03][357260754081452][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 7858 17944 24078580 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:31:03][357260754081452][296 ms][DEBUG] targetPkg: running [2025-08-23 16:31:03][357260754081452][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 16:31:03][357260754081452][296 ms][DEBUG] START check_boot_completed [2025-08-23 16:31:03][357260754081452][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:31:03][357260754081452][325 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 16:31:03][357260754081452][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:31:03][357260754081452][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:31:03][357260754081452][373 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 16:31:03][357260754081452][373 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:31:03][357260754081452][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260754081452\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2362\"}'\'' -e'"" [2025-08-23 16:31:03][357260754081452][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:31:03][357260754081452][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260754081452\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2362\"}'\'' -e'"" [2025-08-23 16:31:07][357260754081452][4512 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f40f4ffb-6daa-47ab-88a6-e207b03a6ae8","id":"QR_f40f4ffb-6daa-47ab-88a6-e207b03a6ae8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:31:08][357260754081452][4668 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 16:31:08][357260754081452][4668 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 16:31:08][357260754081452][4668 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:35:02][350226695681137][1 ms][INFO] === Request start === [2025-08-23 16:35:02][350226695681137][1 ms][DEBUG] START check_scloud [2025-08-23 16:35:02][350226695681137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:35:02][350226695681137][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 7858 17944 24232436 171832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:35:02][350226695681137][310 ms][DEBUG] targetPkg: running [2025-08-23 16:35:02][350226695681137][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 16:35:02][350226695681137][310 ms][DEBUG] START check_boot_completed [2025-08-23 16:35:02][350226695681137][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:35:02][350226695681137][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:35:02][350226695681137][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:35:02][350226695681137][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:35:02][350226695681137][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:35:02][350226695681137][388 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:35:02][350226695681137][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695681137\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-23 16:35:02][350226695681137][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:35:02][350226695681137][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695681137\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-23 16:35:07][350226695681137][4746 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0ecaa2f-cce9-48e1-a07e-5827df292947","id":"QR_a0ecaa2f-cce9-48e1-a07e-5827df292947","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:35:07][350226695681137][4902 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-23 16:35:07][350226695681137][4902 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-08-23 16:35:07][350226695681137][4902 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:36:03][352600227422913][0 ms][INFO] === Request start === [2025-08-23 16:36:03][352600227422913][1 ms][DEBUG] START check_scloud [2025-08-23 16:36:03][352600227422913][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:36:03][352600227422913][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 7858 17944 24398544 183776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:36:03][352600227422913][295 ms][DEBUG] targetPkg: running [2025-08-23 16:36:03][352600227422913][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 16:36:03][352600227422913][295 ms][DEBUG] START check_boot_completed [2025-08-23 16:36:03][352600227422913][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:36:03][352600227422913][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:36:03][352600227422913][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:36:03][352600227422913][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:36:03][352600227422913][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:36:03][352600227422913][404 ms][DEBUG] START check_internet [2025-08-23 16:36:03][352600227422913][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.719/200.719/200.719/0.000 ms\n [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] check_internet: online [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] END check_internet in 469 ms [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:36:04][352600227422913][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227422913\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:36:04][352600227422913][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227422913\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-23 16:36:08][352600227422913][4903 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b67e157-8543-4682-af28-dda8543d6a4c","id":"QR_8b67e157-8543-4682-af28-dda8543d6a4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:36:08][352600227422913][5059 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 16:36:08][352600227422913][5059 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 16:36:08][352600227422913][5059 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:36:10][351272331402560][0 ms][INFO] === Request start === [2025-08-23 16:36:10][351272331402560][1 ms][DEBUG] START check_scloud [2025-08-23 16:36:10][351272331402560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:36:10][351272331402560][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 7858 17944 24547288 194512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:36:10][351272331402560][299 ms][DEBUG] targetPkg: running [2025-08-23 16:36:10][351272331402560][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 16:36:10][351272331402560][299 ms][DEBUG] START check_boot_completed [2025-08-23 16:36:10][351272331402560][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:36:10][351272331402560][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:36:10][351272331402560][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:36:10][351272331402560][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:36:10][351272331402560][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:36:10][351272331402560][392 ms][DEBUG] START check_internet [2025-08-23 16:36:10][351272331402560][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:36:10][351272331402560][642 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.844/136.844/136.844/0.000 ms\n [2025-08-23 16:36:10][351272331402560][642 ms][DEBUG] check_internet: online [2025-08-23 16:36:10][351272331402560][643 ms][DEBUG] END check_internet in 250 ms [2025-08-23 16:36:10][351272331402560][643 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:36:10][351272331402560][643 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272331402560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1784\"}'\'' -e'"" [2025-08-23 16:36:10][351272331402560][643 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:36:10][351272331402560][643 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272331402560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1784\"}'\'' -e'"" [2025-08-23 16:36:14][351272331402560][4157 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df431dd3-724c-435d-8241-2963f3a8beb4","id":"QR_df431dd3-724c-435d-8241-2963f3a8beb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:36:14][351272331402560][4313 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-08-23 16:36:14][351272331402560][4313 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-23 16:36:14][351272331402560][4314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:37:03][359322105622166][1 ms][INFO] === Request start === [2025-08-23 16:37:03][359322105622166][1 ms][DEBUG] START check_scloud [2025-08-23 16:37:03][359322105622166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:37:03][359322105622166][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7858 17944 24659096 206892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:37:03][359322105622166][297 ms][DEBUG] targetPkg: running [2025-08-23 16:37:03][359322105622166][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 16:37:03][359322105622166][298 ms][DEBUG] START check_boot_completed [2025-08-23 16:37:03][359322105622166][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:37:03][359322105622166][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:37:03][359322105622166][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:37:03][359322105622166][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 16:37:03][359322105622166][422 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 16:37:03][359322105622166][422 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:37:03][359322105622166][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359322105622166\",\"model\":\"SM-A505F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5883\"}'\'' -e'"" [2025-08-23 16:37:03][359322105622166][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:37:03][359322105622166][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359322105622166\",\"model\":\"SM-A505F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5883\"}'\'' -e'"" [2025-08-23 16:37:07][359322105622166][4499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_812bd925-7ab5-4261-8902-4f4db88270c8","id":"QR_812bd925-7ab5-4261-8902-4f4db88270c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:37:07][359322105622166][4656 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-23 16:37:07][359322105622166][4656 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-23 16:37:07][359322105622166][4656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:37:09][352549933575987][0 ms][INFO] === Request start === [2025-08-23 16:37:09][352549933575987][1 ms][DEBUG] START check_scloud [2025-08-23 16:37:09][352549933575987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:37:09][352549933575987][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 7858 17944 24803744 216988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:37:09][352549933575987][316 ms][DEBUG] targetPkg: running [2025-08-23 16:37:09][352549933575987][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 16:37:09][352549933575987][316 ms][DEBUG] START check_boot_completed [2025-08-23 16:37:09][352549933575987][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:37:09][352549933575987][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:37:09][352549933575987][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:37:09][352549933575987][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:37:09][352549933575987][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:37:09][352549933575987][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:37:09][352549933575987][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6029\"}'\'' -e'"" [2025-08-23 16:37:09][352549933575987][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:37:09][352549933575987][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6029\"}'\'' -e'"" [2025-08-23 16:37:13][352549933575987][4174 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 16:37:13][352549933575987][4330 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=115 [2025-08-23 16:37:13][352549933575987][4330 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 16:37:13][352549933575987][4330 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 16:37:14][][0 ms][INFO] === Request start === [2025-08-23 16:37:14][][1 ms][DEBUG] START check_scloud [2025-08-23 16:37:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:37:14][][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 7858 17944 24976936 228156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:37:14][][286 ms][DEBUG] targetPkg: running [2025-08-23 16:37:14][][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-23 16:37:14][][286 ms][DEBUG] START check_boot_completed [2025-08-23 16:37:14][][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:37:14][][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:37:14][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:37:14][][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:37:14][][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:37:14][][364 ms][DEBUG] rawBody.length=1129 [2025-08-23 16:37:14][][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-08-23 16:37:14][][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:37:14][][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-08-23 16:37:17][][3816 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:37:18][][3972 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-23 16:37:18][][3972 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-23 16:37:18][][3972 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:38:04][351771920626612][0 ms][INFO] === Request start === [2025-08-23 16:38:04][351771920626612][1 ms][DEBUG] START check_scloud [2025-08-23 16:38:04][351771920626612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:38:04][351771920626612][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 7858 17944 25107140 239984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:38:04][351771920626612][290 ms][DEBUG] targetPkg: running [2025-08-23 16:38:04][351771920626612][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 16:38:04][351771920626612][290 ms][DEBUG] START check_boot_completed [2025-08-23 16:38:04][351771920626612][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:38:04][351771920626612][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:38:04][351771920626612][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:38:04][351771920626612][383 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 16:38:04][351771920626612][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:38:04][351771920626612][384 ms][DEBUG] START check_internet [2025-08-23 16:38:04][351771920626612][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:38:05][351771920626612][680 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.902/171.902/171.902/0.000 ms\n [2025-08-23 16:38:05][351771920626612][680 ms][DEBUG] check_internet: online [2025-08-23 16:38:05][351771920626612][680 ms][DEBUG] END check_internet in 297 ms [2025-08-23 16:38:05][351771920626612][680 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:38:05][351771920626612][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771920626612\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1217\"}'\'' -e'"" [2025-08-23 16:38:05][351771920626612][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:38:05][351771920626612][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771920626612\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1217\"}'\'' -e'"" [2025-08-23 16:38:08][351771920626612][4476 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 16:38:08][351771920626612][4476 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-23 16:38:08][351771920626612][4476 ms][WARN] Detected error: Process with pid 7858 either refused to load frida-agent, or terminated during injection [2025-08-23 16:38:08][351771920626612][4476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:38:09][351771920626612][4632 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 16:38:09][351771920626612][4632 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:38:09][351771920626612][4632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:38:09][351771920626612][4773 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 16:38:09][351771920626612][4773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:38:09][351771920626612][4929 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:38:11][351771920626612][6944 ms][DEBUG] START check_boot_completed [2025-08-23 16:38:11][351771920626612][6944 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:38:11][351771920626612][6991 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:38:11][351771920626612][6991 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:38:11][351771920626612][7038 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:38:11][351771920626612][7038 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:38:14][351771920626612][10053 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:38:14][351771920626612][10053 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771920626612\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1217\"}'\'' -e'"" [2025-08-23 16:38:20][351771920626612][16473 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb79e088-30d9-4c1e-ab5d-86272b88bc29","id":"QR_fb79e088-30d9-4c1e-ab5d-86272b88bc29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:38:21][351771920626612][16629 ms][DEBUG] proc_open done in 6577 ms; code=255; res.len=3343 [2025-08-23 16:38:21][351771920626612][16630 ms][DEBUG] END runCmdUntilRes#2 in 6577 ms [2025-08-23 16:38:21][351771920626612][16630 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:38:26][353428899155911][0 ms][INFO] === Request start === [2025-08-23 16:38:26][353428899155911][1 ms][DEBUG] START check_scloud [2025-08-23 16:38:26][353428899155911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:38:27][353428899155911][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 9977 17944 23764328 126700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:38:27][353428899155911][272 ms][DEBUG] targetPkg: running [2025-08-23 16:38:27][353428899155911][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 16:38:27][353428899155911][272 ms][DEBUG] START check_boot_completed [2025-08-23 16:38:27][353428899155911][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:38:27][353428899155911][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:38:27][353428899155911][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:38:27][353428899155911][382 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:38:27][353428899155911][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:38:27][353428899155911][382 ms][DEBUG] START check_internet [2025-08-23 16:38:27][353428899155911][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.554/214.554/214.554/0.000 ms\n [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] check_internet: online [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] END check_internet in 328 ms [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:38:27][353428899155911][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899155911\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8892\"}'\'' -e'"" [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:38:27][353428899155911][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428899155911\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8892\"}'\'' -e'"" [2025-08-23 16:38:32][353428899155911][5740 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82396a1c-322d-4dc1-b637-5a04eda334b3","id":"QR_82396a1c-322d-4dc1-b637-5a04eda334b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:38:32][353428899155911][5896 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-23 16:38:32][353428899155911][5896 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-23 16:38:32][353428899155911][5896 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:39:03][357950542755744][0 ms][INFO] === Request start === [2025-08-23 16:39:03][357950542755744][1 ms][DEBUG] START check_scloud [2025-08-23 16:39:03][357950542755744][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:39:03][357950542755744][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 9977 17944 23863828 138380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:39:03][357950542755744][257 ms][DEBUG] targetPkg: running [2025-08-23 16:39:03][357950542755744][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 16:39:03][357950542755744][257 ms][DEBUG] START check_boot_completed [2025-08-23 16:39:03][357950542755744][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:39:03][357950542755744][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:39:03][357950542755744][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:39:03][357950542755744][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:39:03][357950542755744][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:39:03][357950542755744][350 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:39:03][357950542755744][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542755744\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2013\"}'\'' -e'"" [2025-08-23 16:39:03][357950542755744][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:39:03][357950542755744][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542755744\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2013\"}'\'' -e'"" [2025-08-23 16:39:07][357950542755744][4365 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d5bd31c-8bb4-4209-9fbc-144756fcba5e","id":"QR_6d5bd31c-8bb4-4209-9fbc-144756fcba5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:39:07][357950542755744][4521 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 16:39:07][357950542755744][4521 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-23 16:39:07][357950542755744][4521 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:39:10][352749382422091][1 ms][INFO] === Request start === [2025-08-23 16:39:10][352749382422091][1 ms][DEBUG] START check_scloud [2025-08-23 16:39:10][352749382422091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:39:11][352749382422091][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9977 17944 24037020 149588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:39:11][352749382422091][314 ms][DEBUG] targetPkg: running [2025-08-23 16:39:11][352749382422091][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 16:39:11][352749382422091][314 ms][DEBUG] START check_boot_completed [2025-08-23 16:39:11][352749382422091][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:39:11][352749382422091][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:39:11][352749382422091][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:39:11][352749382422091][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:39:11][352749382422091][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:39:11][352749382422091][407 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:39:11][352749382422091][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3480\"}'\'' -e'"" [2025-08-23 16:39:11][352749382422091][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:39:11][352749382422091][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382422091\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3480\"}'\'' -e'"" [2025-08-23 16:39:16][352749382422091][5218 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 16:39:16][352749382422091][5375 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=115 [2025-08-23 16:39:16][352749382422091][5375 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-23 16:39:16][352749382422091][5375 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 16:39:16][][0 ms][INFO] === Request start === [2025-08-23 16:39:16][][1 ms][DEBUG] START check_scloud [2025-08-23 16:39:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:39:17][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9977 17944 24197924 160424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:39:17][][309 ms][DEBUG] targetPkg: running [2025-08-23 16:39:17][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 16:39:17][][309 ms][DEBUG] START check_boot_completed [2025-08-23 16:39:17][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:39:17][][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:39:17][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:39:17][][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:39:17][][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:39:17][][403 ms][DEBUG] rawBody.length=1130 [2025-08-23 16:39:17][][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50YPN8X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3730\"}'\'' -e'"" [2025-08-23 16:39:17][][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:39:17][][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50YPN8X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3730\"}'\'' -e'"" [2025-08-23 16:39:21][][4730 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 16:39:21][][4886 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=107 [2025-08-23 16:39:21][][4886 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 16:39:21][][4886 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 16:40:04][356360393031826][0 ms][INFO] === Request start === [2025-08-23 16:40:04][356360393031826][1 ms][DEBUG] START check_scloud [2025-08-23 16:40:04][356360393031826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:40:05][356360393031826][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 9977 17944 24289280 172528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:40:05][356360393031826][314 ms][DEBUG] targetPkg: running [2025-08-23 16:40:05][356360393031826][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 16:40:05][356360393031826][314 ms][DEBUG] START check_boot_completed [2025-08-23 16:40:05][356360393031826][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:40:05][356360393031826][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:40:05][356360393031826][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:40:05][356360393031826][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:40:05][356360393031826][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:40:05][356360393031826][393 ms][DEBUG] START check_internet [2025-08-23 16:40:05][356360393031826][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.107/238.107/238.107/0.000 ms\n [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] check_internet: online [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] END check_internet in 375 ms [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:40:05][356360393031826][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2426\"}'\'' -e'"" [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:40:05][356360393031826][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2426\"}'\'' -e'"" [2025-08-23 16:40:10][356360393031826][5922 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a716b838-4552-4aa9-9c6a-725337e2d405","id":"QR_a716b838-4552-4aa9-9c6a-725337e2d405","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:40:11][356360393031826][6078 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-23 16:40:11][356360393031826][6078 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-23 16:40:11][356360393031826][6078 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:41:03][351263051332194][0 ms][INFO] === Request start === [2025-08-23 16:41:03][351263051332194][1 ms][DEBUG] START check_scloud [2025-08-23 16:41:03][351263051332194][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:41:04][351263051332194][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 9977 17944 24430808 183832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:41:04][351263051332194][314 ms][DEBUG] targetPkg: running [2025-08-23 16:41:04][351263051332194][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 16:41:04][351263051332194][314 ms][DEBUG] START check_boot_completed [2025-08-23 16:41:04][351263051332194][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:41:04][351263051332194][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:41:04][351263051332194][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:41:04][351263051332194][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:41:04][351263051332194][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:41:04][351263051332194][424 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:41:04][351263051332194][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051332194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4299\"}'\'' -e'"" [2025-08-23 16:41:04][351263051332194][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:41:04][351263051332194][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051332194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4299\"}'\'' -e'"" [2025-08-23 16:41:08][351263051332194][4672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb1c129f-0942-4f3c-ad25-f1f51aa35308","id":"QR_cb1c129f-0942-4f3c-ad25-f1f51aa35308","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:41:08][351263051332194][4829 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-23 16:41:08][351263051332194][4829 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-08-23 16:41:08][351263051332194][4829 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:43:03][357651651755596][1 ms][INFO] === Request start === [2025-08-23 16:43:03][357651651755596][1 ms][DEBUG] START check_scloud [2025-08-23 16:43:03][357651651755596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:43:03][357651651755596][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 9977 17944 24536380 195660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:43:03][357651651755596][302 ms][DEBUG] targetPkg: running [2025-08-23 16:43:03][357651651755596][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 16:43:03][357651651755596][302 ms][DEBUG] START check_boot_completed [2025-08-23 16:43:03][357651651755596][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:43:03][357651651755596][332 ms][DEBUG] ADB: done in 29 ms; out [2025-08-23 16:43:03][357651651755596][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:43:04][357651651755596][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:43:04][357651651755596][379 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 16:43:04][357651651755596][379 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:43:04][357651651755596][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651651755596\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9326\"}'\'' -e'"" [2025-08-23 16:43:04][357651651755596][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:43:04][357651651755596][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651651755596\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9326\"}'\'' -e'"" [2025-08-23 16:43:08][357651651755596][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_020a2ac0-e3d1-49ef-8d57-314a014d0d0e","id":"QR_020a2ac0-e3d1-49ef-8d57-314a014d0d0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:43:08][357651651755596][4706 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-23 16:43:08][357651651755596][4706 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-23 16:43:08][357651651755596][4706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:45:04][352838659064882][1 ms][INFO] === Request start === [2025-08-23 16:45:04][352838659064882][1 ms][DEBUG] START check_scloud [2025-08-23 16:45:04][352838659064882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:45:04][352838659064882][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 9977 17944 24680992 207352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:45:04][352838659064882][299 ms][DEBUG] targetPkg: running [2025-08-23 16:45:04][352838659064882][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 16:45:04][352838659064882][299 ms][DEBUG] START check_boot_completed [2025-08-23 16:45:04][352838659064882][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:45:04][352838659064882][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:45:04][352838659064882][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:45:04][352838659064882][440 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 16:45:04][352838659064882][440 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:45:04][352838659064882][440 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:45:04][352838659064882][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838659064882\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8431\"}'\'' -e'"" [2025-08-23 16:45:04][352838659064882][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:45:04][352838659064882][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838659064882\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8431\"}'\'' -e'"" [2025-08-23 16:45:11][352838659064882][7578 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85053f01-9ee5-4354-8eb9-d0e5726135c1","id":"QR_85053f01-9ee5-4354-8eb9-d0e5726135c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:45:11][352838659064882][7734 ms][DEBUG] proc_open done in 7295 ms; code=255; res.len=3343 [2025-08-23 16:45:11][352838659064882][7735 ms][DEBUG] END runCmdUntilRes#1 in 7295 ms [2025-08-23 16:45:11][352838659064882][7735 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:46:03][350178737057059][0 ms][INFO] === Request start === [2025-08-23 16:46:03][350178737057059][1 ms][DEBUG] START check_scloud [2025-08-23 16:46:03][350178737057059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:46:04][350178737057059][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 9977 17944 24839940 217980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:46:04][350178737057059][272 ms][DEBUG] targetPkg: running [2025-08-23 16:46:04][350178737057059][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-23 16:46:04][350178737057059][272 ms][DEBUG] START check_boot_completed [2025-08-23 16:46:04][350178737057059][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:46:04][350178737057059][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:46:04][350178737057059][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:46:04][350178737057059][412 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 16:46:04][350178737057059][413 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 16:46:04][350178737057059][413 ms][DEBUG] START check_internet [2025-08-23 16:46:04][350178737057059][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.319/201.319/201.319/0.000 ms\n [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] check_internet: online [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] END check_internet in 500 ms [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:46:04][350178737057059][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737057059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3761\"}'\'' -e'"" [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:46:04][350178737057059][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737057059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3761\"}'\'' -e'"" [2025-08-23 16:46:13][350178737057059][9895 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e77d62b0-3cd8-4fe8-aa06-fe1b4f6ff3cc","id":"QR_e77d62b0-3cd8-4fe8-aa06-fe1b4f6ff3cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:46:13][350178737057059][10051 ms][DEBUG] proc_open done in 9138 ms; code=255; res.len=3343 [2025-08-23 16:46:13][350178737057059][10051 ms][DEBUG] END runCmdUntilRes#1 in 9138 ms [2025-08-23 16:46:13][350178737057059][10051 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:46:15][350250419000614][0 ms][INFO] === Request start === [2025-08-23 16:46:15][350250419000614][1 ms][DEBUG] START check_scloud [2025-08-23 16:46:15][350250419000614][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:46:15][350250419000614][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 9977 17944 25005964 229732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:46:15][350250419000614][312 ms][DEBUG] targetPkg: running [2025-08-23 16:46:15][350250419000614][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 16:46:15][350250419000614][312 ms][DEBUG] START check_boot_completed [2025-08-23 16:46:15][350250419000614][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:46:15][350250419000614][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:46:15][350250419000614][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:46:15][350250419000614][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:46:15][350250419000614][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:46:15][350250419000614][406 ms][DEBUG] START check_internet [2025-08-23 16:46:15][350250419000614][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:46:16][350250419000614][733 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.836/220.836/220.836/0.000 ms\n [2025-08-23 16:46:16][350250419000614][733 ms][DEBUG] check_internet: online [2025-08-23 16:46:16][350250419000614][733 ms][DEBUG] END check_internet in 328 ms [2025-08-23 16:46:16][350250419000614][733 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:46:16][350250419000614][734 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250419000614\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1684\"}'\'' -e'"" [2025-08-23 16:46:16][350250419000614][734 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:46:16][350250419000614][734 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250419000614\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1684\"}'\'' -e'"" [2025-08-23 16:46:19][350250419000614][4373 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f54de3d-b9d3-4d50-a4ad-76849866afbb","id":"QR_2f54de3d-b9d3-4d50-a4ad-76849866afbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:46:19][350250419000614][4529 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-23 16:46:19][350250419000614][4529 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-23 16:46:19][350250419000614][4529 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:48:04][353994911593215][1 ms][INFO] === Request start === [2025-08-23 16:48:04][353994911593215][1 ms][DEBUG] START check_scloud [2025-08-23 16:48:04][353994911593215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:48:05][353994911593215][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 9977 17944 25103436 241620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:48:05][353994911593215][259 ms][DEBUG] targetPkg: running [2025-08-23 16:48:05][353994911593215][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-23 16:48:05][353994911593215][259 ms][DEBUG] START check_boot_completed [2025-08-23 16:48:05][353994911593215][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:48:05][353994911593215][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:48:05][353994911593215][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:48:05][353994911593215][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:48:05][353994911593215][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:48:05][353994911593215][352 ms][DEBUG] START check_internet [2025-08-23 16:48:05][353994911593215][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.820/266.820/266.820/0.000 ms\n [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] check_internet: online [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] END check_internet in 375 ms [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:48:05][353994911593215][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7482\"}'\'' -e'"" [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:48:05][353994911593215][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7482\"}'\'' -e'"" [2025-08-23 16:48:09][353994911593215][4382 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 16:48:09][353994911593215][4382 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 16:48:09][353994911593215][4382 ms][WARN] Detected error: Process with pid 9977 either refused to load frida-agent, or terminated during injection [2025-08-23 16:48:09][353994911593215][4383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:48:09][353994911593215][4523 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 16:48:09][353994911593215][4523 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:48:09][353994911593215][4523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:48:09][353994911593215][4648 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 16:48:09][353994911593215][4648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:48:09][353994911593215][4820 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:48:11][353994911593215][6834 ms][DEBUG] START check_boot_completed [2025-08-23 16:48:11][353994911593215][6835 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:48:11][353994911593215][6881 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:48:11][353994911593215][6882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:48:11][353994911593215][6928 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:48:11][353994911593215][6929 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:48:14][353994911593215][9943 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:48:14][353994911593215][9943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7482\"}'\'' -e'"" [2025-08-23 16:48:15][353994911593215][10568 ms][DEBUG] proc_open done in 625 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-23 16:48:15][353994911593215][10568 ms][DEBUG] END runCmdUntilRes#2 in 625 ms [2025-08-23 16:48:15][353994911593215][10569 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-23 16:49:04][353994911593215][0 ms][INFO] === Request start === [2025-08-23 16:49:04][353994911593215][1 ms][DEBUG] START check_scloud [2025-08-23 16:49:04][353994911593215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:49:04][353994911593215][420 ms][DEBUG] SU: done in 419 ms; out [2025-08-23 16:49:04][353994911593215][420 ms][WARN] targetPkg: not running, restarting [2025-08-23 16:49:04][353994911593215][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:49:04][353994911593215][560 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 16:49:04][353994911593215][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:49:04][353994911593215][810 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:49:06][353994911593215][2825 ms][DEBUG] END check_scloud in 2824 ms [2025-08-23 16:49:06][353994911593215][2825 ms][DEBUG] START check_boot_completed [2025-08-23 16:49:06][353994911593215][2825 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:49:07][353994911593215][2872 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:49:07][353994911593215][2872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:49:07][353994911593215][2935 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 16:49:07][353994911593215][2935 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 16:49:07][353994911593215][2935 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:49:07][353994911593215][2935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8076\"}'\'' -e'"" [2025-08-23 16:49:07][353994911593215][2935 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:49:07][353994911593215][2935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8076\"}'\'' -e'"" [2025-08-23 16:49:14][353994911593215][10292 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76ede4d8-3319-48e1-8a21-bb398b68d7f3","id":"QR_76ede4d8-3319-48e1-8a21-bb398b68d7f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:49:14][353994911593215][10448 ms][DEBUG] proc_open done in 7513 ms; code=255; res.len=3343 [2025-08-23 16:49:14][353994911593215][10448 ms][DEBUG] END runCmdUntilRes#1 in 7513 ms [2025-08-23 16:49:14][353994911593215][10448 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:50:03][351317840822046][0 ms][INFO] === Request start === [2025-08-23 16:50:03][351317840822046][1 ms][DEBUG] START check_scloud [2025-08-23 16:50:03][351317840822046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:50:03][351317840822046][373 ms][DEBUG] SU: done in 372 ms; outu0_a118 15985 11575 23743028 58016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:50:03][351317840822046][373 ms][DEBUG] targetPkg: running [2025-08-23 16:50:03][351317840822046][373 ms][DEBUG] END check_scloud in 372 ms [2025-08-23 16:50:03][351317840822046][373 ms][DEBUG] START check_boot_completed [2025-08-23 16:50:03][351317840822046][373 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:50:03][351317840822046][420 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:50:03][351317840822046][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:50:03][351317840822046][482 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:50:03][351317840822046][482 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:50:03][351317840822046][482 ms][DEBUG] START check_internet [2025-08-23 16:50:03][351317840822046][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:50:04][351317840822046][841 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.786/182.786/182.786/0.000 ms\n [2025-08-23 16:50:04][351317840822046][841 ms][DEBUG] check_internet: online [2025-08-23 16:50:04][351317840822046][841 ms][DEBUG] END check_internet in 359 ms [2025-08-23 16:50:04][351317840822046][842 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:50:04][351317840822046][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840822046\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1218\"}'\'' -e'"" [2025-08-23 16:50:04][351317840822046][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:50:04][351317840822046][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840822046\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1218\"}'\'' -e'"" [2025-08-23 16:50:08][351317840822046][5465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7250b0c6-1c37-40bd-95fb-32866993464d","id":"QR_7250b0c6-1c37-40bd-95fb-32866993464d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:50:09][351317840822046][5621 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-08-23 16:50:09][351317840822046][5621 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-23 16:50:09][351317840822046][5621 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:51:05][351652534672582][1 ms][INFO] === Request start === [2025-08-23 16:51:05][351652534672582][1 ms][DEBUG] START check_scloud [2025-08-23 16:51:05][351652534672582][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:51:05][351652534672582][277 ms][DEBUG] SU: done in 275 ms; outu0_a118 15985 11575 23882520 84992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:51:05][351652534672582][277 ms][DEBUG] targetPkg: running [2025-08-23 16:51:05][351652534672582][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-23 16:51:05][351652534672582][277 ms][DEBUG] START check_boot_completed [2025-08-23 16:51:05][351652534672582][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:51:05][351652534672582][323 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:51:05][351652534672582][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:51:05][351652534672582][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:51:05][351652534672582][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:51:05][351652534672582][370 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:51:05][351652534672582][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652534672582\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9461\"}'\'' -e'"" [2025-08-23 16:51:05][351652534672582][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:51:05][351652534672582][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652534672582\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9461\"}'\'' -e'"" [2025-08-23 16:51:11][351652534672582][6728 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_801f3e91-1ea6-4e92-87b7-c3705462c05a","id":"QR_801f3e91-1ea6-4e92-87b7-c3705462c05a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:51:12][351652534672582][6884 ms][DEBUG] proc_open done in 6514 ms; code=255; res.len=3343 [2025-08-23 16:51:12][351652534672582][6884 ms][DEBUG] END runCmdUntilRes#1 in 6514 ms [2025-08-23 16:51:12][351652534672582][6884 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:51:16][354814720353495][0 ms][INFO] === Request start === [2025-08-23 16:51:16][354814720353495][1 ms][DEBUG] START check_scloud [2025-08-23 16:51:16][354814720353495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:51:17][354814720353495][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 15985 11575 23995220 97656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:51:17][354814720353495][311 ms][DEBUG] targetPkg: running [2025-08-23 16:51:17][354814720353495][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 16:51:17][354814720353495][311 ms][DEBUG] START check_boot_completed [2025-08-23 16:51:17][354814720353495][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:51:17][354814720353495][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:51:17][354814720353495][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:51:17][354814720353495][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:51:17][354814720353495][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:51:17][354814720353495][420 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:51:17][354814720353495][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354814720353495\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3407\"}'\'' -e'"" [2025-08-23 16:51:17][354814720353495][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:51:17][354814720353495][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354814720353495\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3407\"}'\'' -e'"" [2025-08-23 16:51:21][354814720353495][4622 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_943f4049-d6ce-4d45-a3a6-1d20a339aa20","id":"QR_943f4049-d6ce-4d45-a3a6-1d20a339aa20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:51:21][354814720353495][4778 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-23 16:51:21][354814720353495][4778 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 16:51:21][354814720353495][4778 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:52:05][353353825992783][1 ms][INFO] === Request start === [2025-08-23 16:52:05][353353825992783][1 ms][DEBUG] START check_scloud [2025-08-23 16:52:05][353353825992783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:52:05][353353825992783][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15985 11575 24100692 109052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:52:05][353353825992783][305 ms][DEBUG] targetPkg: running [2025-08-23 16:52:05][353353825992783][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 16:52:05][353353825992783][305 ms][DEBUG] START check_boot_completed [2025-08-23 16:52:05][353353825992783][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:52:05][353353825992783][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:52:05][353353825992783][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:52:05][353353825992783][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:52:05][353353825992783][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:52:05][353353825992783][399 ms][DEBUG] START check_internet [2025-08-23 16:52:05][353353825992783][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:52:06][353353825992783][851 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.283/202.283/202.283/0.000 ms\n [2025-08-23 16:52:06][353353825992783][852 ms][DEBUG] check_internet: online [2025-08-23 16:52:06][353353825992783][852 ms][DEBUG] END check_internet in 453 ms [2025-08-23 16:52:06][353353825992783][852 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:52:06][353353825992783][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353825992783\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8589\"}'\'' -e'"" [2025-08-23 16:52:06][353353825992783][852 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:52:06][353353825992783][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353825992783\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8589\"}'\'' -e'"" [2025-08-23 16:52:11][353353825992783][6100 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b62ec0d-808b-4cb2-8057-6573db057bc7","id":"QR_5b62ec0d-808b-4cb2-8057-6573db057bc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:52:11][353353825992783][6256 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-23 16:52:11][353353825992783][6256 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-23 16:52:11][353353825992783][6256 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:52:18][352686592744874][1 ms][INFO] === Request start === [2025-08-23 16:52:18][352686592744874][1 ms][DEBUG] START check_scloud [2025-08-23 16:52:18][352686592744874][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:52:18][352686592744874][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15985 11575 24226844 120024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:52:18][352686592744874][316 ms][DEBUG] targetPkg: running [2025-08-23 16:52:18][352686592744874][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 16:52:18][352686592744874][317 ms][DEBUG] START check_boot_completed [2025-08-23 16:52:18][352686592744874][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:52:18][352686592744874][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:52:18][352686592744874][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:52:18][352686592744874][411 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 16:52:18][352686592744874][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:52:18][352686592744874][411 ms][DEBUG] START check_internet [2025-08-23 16:52:18][352686592744874][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.277/223.277/223.277/0.000 ms\n [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] check_internet: online [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] END check_internet in 327 ms [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:52:18][352686592744874][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686592744874\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2373\"}'\'' -e'"" [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:52:18][352686592744874][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686592744874\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2373\"}'\'' -e'"" [2025-08-23 16:52:24][352686592744874][6096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b48de91-53d4-40a3-ba4f-8e2a08c2be0c","id":"QR_9b48de91-53d4-40a3-ba4f-8e2a08c2be0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:52:24][352686592744874][6252 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 16:52:24][352686592744874][6252 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 16:52:24][352686592744874][6252 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:52:31][357576773766280][0 ms][INFO] === Request start === [2025-08-23 16:52:31][357576773766280][1 ms][DEBUG] START check_scloud [2025-08-23 16:52:31][357576773766280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:52:31][357576773766280][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 15985 11575 24367232 131892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:52:31][357576773766280][312 ms][DEBUG] targetPkg: running [2025-08-23 16:52:31][357576773766280][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 16:52:31][357576773766280][312 ms][DEBUG] START check_boot_completed [2025-08-23 16:52:31][357576773766280][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:52:31][357576773766280][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:52:31][357576773766280][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:52:31][357576773766280][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:52:31][357576773766280][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:52:31][357576773766280][405 ms][DEBUG] START check_internet [2025-08-23 16:52:31][357576773766280][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:52:31][357576773766280][702 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.754/198.754/198.754/0.000 ms\n [2025-08-23 16:52:31][357576773766280][703 ms][DEBUG] check_internet: online [2025-08-23 16:52:31][357576773766280][703 ms][DEBUG] END check_internet in 297 ms [2025-08-23 16:52:31][357576773766280][703 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:52:31][357576773766280][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576773766280\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-08-23 16:52:31][357576773766280][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:52:31][357576773766280][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576773766280\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-08-23 16:52:37][357576773766280][5967 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31e3d0f6-a15c-4be0-9c8b-72eedb9a94e5","id":"QR_31e3d0f6-a15c-4be0-9c8b-72eedb9a94e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:52:37][357576773766280][6123 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-23 16:52:37][357576773766280][6123 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-23 16:52:37][357576773766280][6123 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:53:06][351835827858576][0 ms][INFO] === Request start === [2025-08-23 16:53:06][351835827858576][1 ms][DEBUG] START check_scloud [2025-08-23 16:53:06][351835827858576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:53:06][351835827858576][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 15985 11575 24505664 143120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:53:06][351835827858576][302 ms][DEBUG] targetPkg: running [2025-08-23 16:53:06][351835827858576][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 16:53:06][351835827858576][302 ms][DEBUG] START check_boot_completed [2025-08-23 16:53:06][351835827858576][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:53:06][351835827858576][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:53:06][351835827858576][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:53:06][351835827858576][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:53:06][351835827858576][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:53:06][351835827858576][411 ms][DEBUG] rawBody.length=1159 [2025-08-23 16:53:06][351835827858576][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351835827858576\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2X501JKJB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7876\"}'\'' -e'"" [2025-08-23 16:53:06][351835827858576][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:53:06][351835827858576][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351835827858576\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2X501JKJB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7876\"}'\'' -e'"" [2025-08-23 16:53:12][351835827858576][5534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56f9ca27-6de5-42f2-8991-4b82fe2503ff","id":"QR_56f9ca27-6de5-42f2-8991-4b82fe2503ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:53:12][351835827858576][5691 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-08-23 16:53:12][351835827858576][5691 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-08-23 16:53:12][351835827858576][5691 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:53:19][359797451126286][0 ms][INFO] === Request start === [2025-08-23 16:53:19][359797451126286][1 ms][DEBUG] START check_scloud [2025-08-23 16:53:19][359797451126286][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:53:19][359797451126286][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 15985 11575 24638024 154960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:53:19][359797451126286][270 ms][DEBUG] targetPkg: running [2025-08-23 16:53:19][359797451126286][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-23 16:53:19][359797451126286][270 ms][DEBUG] START check_boot_completed [2025-08-23 16:53:19][359797451126286][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:53:19][359797451126286][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:53:19][359797451126286][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:53:19][359797451126286][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 16:53:19][359797451126286][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 16:53:19][359797451126286][379 ms][DEBUG] rawBody.length=1149 [2025-08-23 16:53:19][359797451126286][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451126286\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-08-23 16:53:19][359797451126286][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:53:19][359797451126286][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451126286\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-08-23 16:53:24][359797451126286][5596 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bffaa82-6ada-428f-a204-717b0d915c4d","id":"QR_7bffaa82-6ada-428f-a204-717b0d915c4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:53:24][359797451126286][5753 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-08-23 16:53:24][359797451126286][5753 ms][DEBUG] END runCmdUntilRes#1 in 5373 ms [2025-08-23 16:53:24][359797451126286][5753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:54:03][351786693355405][0 ms][INFO] === Request start === [2025-08-23 16:54:03][351786693355405][1 ms][DEBUG] START check_scloud [2025-08-23 16:54:03][351786693355405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:54:03][351786693355405][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 15985 11575 24776264 166396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:54:03][351786693355405][255 ms][DEBUG] targetPkg: running [2025-08-23 16:54:03][351786693355405][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 16:54:03][351786693355405][255 ms][DEBUG] START check_boot_completed [2025-08-23 16:54:03][351786693355405][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:54:03][351786693355405][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:54:03][351786693355405][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:54:03][351786693355405][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:54:03][351786693355405][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:54:03][351786693355405][334 ms][DEBUG] START check_internet [2025-08-23 16:54:03][351786693355405][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:54:04][351786693355405][693 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.906/200.906/200.906/0.000 ms\n [2025-08-23 16:54:04][351786693355405][693 ms][DEBUG] check_internet: online [2025-08-23 16:54:04][351786693355405][693 ms][DEBUG] END check_internet in 359 ms [2025-08-23 16:54:04][351786693355405][693 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:54:04][351786693355405][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693355405\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-08-23 16:54:04][351786693355405][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:54:04][351786693355405][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693355405\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-08-23 16:54:08][351786693355405][5020 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e236bbc3-9a1c-4c71-a06a-ee6992cf243a","id":"QR_e236bbc3-9a1c-4c71-a06a-ee6992cf243a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:54:08][351786693355405][5176 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-23 16:54:08][351786693355405][5176 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 16:54:08][351786693355405][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:54:12][355819210361709][0 ms][INFO] === Request start === [2025-08-23 16:54:12][355819210361709][0 ms][DEBUG] START check_scloud [2025-08-23 16:54:12][355819210361709][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:54:13][355819210361709][244 ms][DEBUG] SU: done in 244 ms; outu0_a118 15985 11575 24926416 176996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:54:13][355819210361709][244 ms][DEBUG] targetPkg: running [2025-08-23 16:54:13][355819210361709][244 ms][DEBUG] END check_scloud in 244 ms [2025-08-23 16:54:13][355819210361709][244 ms][DEBUG] START check_boot_completed [2025-08-23 16:54:13][355819210361709][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:54:13][355819210361709][275 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 16:54:13][355819210361709][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:54:13][355819210361709][322 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:54:13][355819210361709][322 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 16:54:13][355819210361709][322 ms][DEBUG] START check_internet [2025-08-23 16:54:13][355819210361709][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.911/190.911/190.911/0.000 ms\n [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] check_internet: online [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] END check_internet in 297 ms [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] rawBody.length=1158 [2025-08-23 16:54:13][355819210361709][619 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819210361709\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW3165C1L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3666\"}'\'' -e'"" [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:54:13][355819210361709][619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819210361709\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW3165C1L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3666\"}'\'' -e'"" [2025-08-23 16:54:17][355819210361709][4759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f26c6c6c-1b00-4294-a75d-e1b097eff7cc","id":"QR_f26c6c6c-1b00-4294-a75d-e1b097eff7cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:54:17][355819210361709][4915 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 16:54:17][355819210361709][4915 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 16:54:17][355819210361709][4915 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:55:03][352674520384690][0 ms][INFO] === Request start === [2025-08-23 16:55:03][352674520384690][1 ms][DEBUG] START check_scloud [2025-08-23 16:55:03][352674520384690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:55:03][352674520384690][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 15985 11575 25062800 188884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:55:03][352674520384690][266 ms][DEBUG] targetPkg: running [2025-08-23 16:55:03][352674520384690][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-23 16:55:03][352674520384690][266 ms][DEBUG] START check_boot_completed [2025-08-23 16:55:03][352674520384690][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:55:03][352674520384690][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 16:55:03][352674520384690][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:55:03][352674520384690][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:55:03][352674520384690][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 16:55:03][352674520384690][359 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:55:03][352674520384690][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520384690\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-08-23 16:55:03][352674520384690][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:55:03][352674520384690][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520384690\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-08-23 16:55:08][352674520384690][4796 ms][DEBUG] proc_open done in 4436 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 16:55:08][352674520384690][4796 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 16:55:08][352674520384690][4796 ms][WARN] Detected error: Process with pid 15985 either refused to load frida-agent, or terminated during injection [2025-08-23 16:55:08][352674520384690][4796 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 16:55:08][352674520384690][4936 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 16:55:08][352674520384690][4936 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 16:55:08][352674520384690][4936 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 16:55:08][352674520384690][5061 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 16:55:08][352674520384690][5062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 16:55:08][352674520384690][5218 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 16:55:10][352674520384690][7233 ms][DEBUG] START check_boot_completed [2025-08-23 16:55:10][352674520384690][7233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:55:10][352674520384690][7280 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:55:10][352674520384690][7280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:55:10][352674520384690][7327 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 16:55:10][352674520384690][7327 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 16:55:13][352674520384690][10341 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 16:55:13][352674520384690][10341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520384690\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-08-23 16:55:17][352674520384690][14403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91f003fa-8566-4862-bbcd-a0e449ac292f","id":"QR_91f003fa-8566-4862-bbcd-a0e449ac292f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:55:17][352674520384690][14559 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-23 16:55:17][352674520384690][14559 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-08-23 16:55:17][352674520384690][14559 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 16:58:03][353204338238539][1 ms][INFO] === Request start === [2025-08-23 16:58:03][353204338238539][1 ms][DEBUG] START check_scloud [2025-08-23 16:58:03][353204338238539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 16:58:03][353204338238539][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 24469 11575 23648072 128824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 16:58:03][353204338238539][306 ms][DEBUG] targetPkg: running [2025-08-23 16:58:03][353204338238539][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 16:58:03][353204338238539][306 ms][DEBUG] START check_boot_completed [2025-08-23 16:58:03][353204338238539][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 16:58:03][353204338238539][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 16:58:03][353204338238539][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 16:58:03][353204338238539][447 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 16:58:03][353204338238539][447 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 16:58:03][353204338238539][447 ms][DEBUG] START check_internet [2025-08-23 16:58:03][353204338238539][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.500/201.500/201.500/0.000 ms\n [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] check_internet: online [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] END check_internet in 547 ms [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] rawBody.length=1148 [2025-08-23 16:58:04][353204338238539][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204338238539\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 16:58:04][353204338238539][994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204338238539\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-08-23 16:58:08][353204338238539][5149 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0976732-179d-4dc2-b5e4-ea51e89330c3","id":"QR_c0976732-179d-4dc2-b5e4-ea51e89330c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 16:58:08][353204338238539][5305 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 16:58:08][353204338238539][5305 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 16:58:08][353204338238539][5305 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:00:04][352600220407473][1 ms][INFO] === Request start === [2025-08-23 17:00:04][352600220407473][1 ms][DEBUG] START check_scloud [2025-08-23 17:00:04][352600220407473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:00:04][352600220407473][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 24469 11575 23782252 139320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:00:04][352600220407473][315 ms][DEBUG] targetPkg: running [2025-08-23 17:00:04][352600220407473][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 17:00:04][352600220407473][315 ms][DEBUG] START check_boot_completed [2025-08-23 17:00:04][352600220407473][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:00:04][352600220407473][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:00:04][352600220407473][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:00:04][352600220407473][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:00:04][352600220407473][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:00:04][352600220407473][409 ms][DEBUG] START check_internet [2025-08-23 17:00:04][352600220407473][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:00:05][352600220407473][908 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.983/202.983/202.983/0.000 ms\n [2025-08-23 17:00:05][352600220407473][909 ms][DEBUG] check_internet: online [2025-08-23 17:00:05][352600220407473][909 ms][DEBUG] END check_internet in 500 ms [2025-08-23 17:00:05][352600220407473][909 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:00:05][352600220407473][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600220407473\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5872\"}'\'' -e'"" [2025-08-23 17:00:05][352600220407473][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:00:05][352600220407473][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600220407473\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5872\"}'\'' -e'"" [2025-08-23 17:00:09][352600220407473][5235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5472383-30d1-46dd-bc97-c0be7067f462","id":"QR_e5472383-30d1-46dd-bc97-c0be7067f462","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:00:09][352600220407473][5392 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 17:00:09][352600220407473][5392 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 17:00:09][352600220407473][5392 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:02:05][352884315072414][1 ms][INFO] === Request start === [2025-08-23 17:02:05][352884315072414][1 ms][DEBUG] START check_scloud [2025-08-23 17:02:05][352884315072414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:02:05][352884315072414][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 24469 11575 23953388 151176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:02:05][352884315072414][302 ms][DEBUG] targetPkg: running [2025-08-23 17:02:05][352884315072414][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 17:02:05][352884315072414][302 ms][DEBUG] START check_boot_completed [2025-08-23 17:02:05][352884315072414][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:02:05][352884315072414][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:02:05][352884315072414][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:02:06][352884315072414][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:02:06][352884315072414][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:02:06][352884315072414][396 ms][DEBUG] START check_internet [2025-08-23 17:02:06][352884315072414][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.312/200.312/200.312/0.000 ms\n [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] check_internet: online [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] END check_internet in 515 ms [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:02:06][352884315072414][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352884315072414\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4385\"}'\'' -e'"" [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:02:06][352884315072414][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352884315072414\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4385\"}'\'' -e'"" [2025-08-23 17:02:12][352884315072414][6784 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22c0bca5-db89-49d5-8b51-47c6fd60006a","id":"QR_22c0bca5-db89-49d5-8b51-47c6fd60006a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:02:12][352884315072414][6940 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-23 17:02:12][352884315072414][6940 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-23 17:02:12][352884315072414][6940 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:04:03][351285622404715][0 ms][INFO] === Request start === [2025-08-23 17:04:03][351285622404715][1 ms][DEBUG] START check_scloud [2025-08-23 17:04:03][351285622404715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:04:03][351285622404715][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 24469 11575 24056848 162604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:04:03][351285622404715][309 ms][DEBUG] targetPkg: running [2025-08-23 17:04:03][351285622404715][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 17:04:03][351285622404715][309 ms][DEBUG] START check_boot_completed [2025-08-23 17:04:03][351285622404715][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:04:03][351285622404715][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:04:03][351285622404715][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:04:03][351285622404715][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:04:03][351285622404715][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:04:03][351285622404715][419 ms][DEBUG] START check_internet [2025-08-23 17:04:03][351285622404715][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:04:03][351285622404715][762 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.633/227.633/227.633/0.000 ms\n [2025-08-23 17:04:03][351285622404715][762 ms][DEBUG] check_internet: online [2025-08-23 17:04:03][351285622404715][762 ms][DEBUG] END check_internet in 344 ms [2025-08-23 17:04:03][351285622404715][762 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:04:03][351285622404715][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-08-23 17:04:03][351285622404715][763 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:04:03][351285622404715][763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-08-23 17:04:08][351285622404715][5198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb1f97d1-2083-4440-9502-3068bc97e1c0","id":"QR_bb1f97d1-2083-4440-9502-3068bc97e1c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:04:08][351285622404715][5355 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 17:04:08][351285622404715][5355 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 17:04:08][351285622404715][5355 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:06:03][358438731221503][1 ms][INFO] === Request start === [2025-08-23 17:06:03][358438731221503][1 ms][DEBUG] START check_scloud [2025-08-23 17:06:03][358438731221503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:06:03][358438731221503][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 24469 11575 24188176 173648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:06:03][358438731221503][263 ms][DEBUG] targetPkg: running [2025-08-23 17:06:03][358438731221503][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 17:06:03][358438731221503][263 ms][DEBUG] START check_boot_completed [2025-08-23 17:06:03][358438731221503][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:06:03][358438731221503][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:06:03][358438731221503][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:06:03][358438731221503][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:06:03][358438731221503][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:06:03][358438731221503][357 ms][DEBUG] START check_internet [2025-08-23 17:06:03][358438731221503][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:06:04][358438731221503][950 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.314/201.314/201.314/0.000 ms\n [2025-08-23 17:06:04][358438731221503][950 ms][DEBUG] check_internet: online [2025-08-23 17:06:04][358438731221503][951 ms][DEBUG] END check_internet in 594 ms [2025-08-23 17:06:04][358438731221503][951 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:06:04][358438731221503][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731221503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-23 17:06:04][358438731221503][951 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:06:04][358438731221503][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731221503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-23 17:06:09][358438731221503][5496 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79a10842-199d-4d1c-8891-4f175df15d40","id":"QR_79a10842-199d-4d1c-8891-4f175df15d40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:06:09][358438731221503][5652 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-23 17:06:09][358438731221503][5652 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-23 17:06:09][358438731221503][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:06:11][358141435596457][0 ms][INFO] === Request start === [2025-08-23 17:06:11][358141435596457][1 ms][DEBUG] START check_scloud [2025-08-23 17:06:11][358141435596457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:06:12][358141435596457][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 24469 11575 24328728 184528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:06:12][358141435596457][325 ms][DEBUG] targetPkg: running [2025-08-23 17:06:12][358141435596457][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-23 17:06:12][358141435596457][325 ms][DEBUG] START check_boot_completed [2025-08-23 17:06:12][358141435596457][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:06:12][358141435596457][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:06:12][358141435596457][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:06:12][358141435596457][420 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 17:06:12][358141435596457][420 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 17:06:12][358141435596457][420 ms][DEBUG] START check_internet [2025-08-23 17:06:12][358141435596457][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] SU: done in 341 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.546/231.546/231.546/0.000 ms\n [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] check_internet: online [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] END check_internet in 341 ms [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:06:12][358141435596457][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435596457\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6762\"}'\'' -e'"" [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:06:12][358141435596457][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435596457\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6762\"}'\'' -e'"" [2025-08-23 17:06:16][358141435596457][4589 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ddb364f-9a27-44de-a75a-b4ec8484a6ab","id":"QR_8ddb364f-9a27-44de-a75a-b4ec8484a6ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:06:16][358141435596457][4745 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 17:06:16][358141435596457][4745 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 17:06:16][358141435596457][4745 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:07:03][357211241955667][0 ms][INFO] === Request start === [2025-08-23 17:07:03][357211241955667][1 ms][DEBUG] START check_scloud [2025-08-23 17:07:03][357211241955667][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:07:03][357211241955667][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 24469 11575 24444632 195576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:07:03][357211241955667][273 ms][DEBUG] targetPkg: running [2025-08-23 17:07:03][357211241955667][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 17:07:03][357211241955667][273 ms][DEBUG] START check_boot_completed [2025-08-23 17:07:03][357211241955667][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:07:03][357211241955667][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:07:03][357211241955667][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:07:03][357211241955667][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:07:03][357211241955667][367 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:07:03][357211241955667][367 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:07:03][357211241955667][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241955667\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7749\"}'\'' -e'"" [2025-08-23 17:07:03][357211241955667][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:07:03][357211241955667][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241955667\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7749\"}'\'' -e'"" [2025-08-23 17:07:07][357211241955667][4459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a621d30-5f9e-4b83-b31b-464555e00ded","id":"QR_3a621d30-5f9e-4b83-b31b-464555e00ded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:07:08][357211241955667][4615 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 17:07:08][357211241955667][4615 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 17:07:08][357211241955667][4616 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:07:10][353074285812291][0 ms][INFO] === Request start === [2025-08-23 17:07:10][353074285812291][1 ms][DEBUG] START check_scloud [2025-08-23 17:07:10][353074285812291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:07:11][353074285812291][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 24469 11575 24607712 207388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:07:11][353074285812291][255 ms][DEBUG] targetPkg: running [2025-08-23 17:07:11][353074285812291][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 17:07:11][353074285812291][255 ms][DEBUG] START check_boot_completed [2025-08-23 17:07:11][353074285812291][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:07:11][353074285812291][285 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 17:07:11][353074285812291][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:07:11][353074285812291][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:07:11][353074285812291][332 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 17:07:11][353074285812291][332 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:07:11][353074285812291][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074285812291\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6601\"}'\'' -e'"" [2025-08-23 17:07:11][353074285812291][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:07:11][353074285812291][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074285812291\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6601\"}'\'' -e'"" [2025-08-23 17:07:15][353074285812291][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51b9f5b6-dc30-4179-b179-fd76ef6a4e58","id":"QR_51b9f5b6-dc30-4179-b179-fd76ef6a4e58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:07:15][353074285812291][4706 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 17:07:15][353074285812291][4706 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 17:07:15][353074285812291][4706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:08:03][355060832323997][0 ms][INFO] === Request start === [2025-08-23 17:08:03][355060832323997][1 ms][DEBUG] START check_scloud [2025-08-23 17:08:03][355060832323997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:08:03][355060832323997][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 24469 11575 24754336 217800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:08:03][355060832323997][299 ms][DEBUG] targetPkg: running [2025-08-23 17:08:03][355060832323997][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 17:08:03][355060832323997][300 ms][DEBUG] START check_boot_completed [2025-08-23 17:08:03][355060832323997][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:08:03][355060832323997][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:08:03][355060832323997][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:08:03][355060832323997][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:08:03][355060832323997][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:08:03][355060832323997][409 ms][DEBUG] START check_internet [2025-08-23 17:08:03][355060832323997][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.720/177.720/177.720/0.000 ms\n [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] check_internet: online [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] END check_internet in 328 ms [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:08:04][355060832323997][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060832323997\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:08:04][355060832323997][737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060832323997\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-08-23 17:08:08][355060832323997][5064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1974f308-80a7-4046-ab28-aa97bc70ba1b","id":"QR_1974f308-80a7-4046-ab28-aa97bc70ba1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:08:08][355060832323997][5220 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 17:08:08][355060832323997][5220 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 17:08:08][355060832323997][5220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:09:03][354255815683950][1 ms][INFO] === Request start === [2025-08-23 17:09:03][354255815683950][1 ms][DEBUG] START check_scloud [2025-08-23 17:09:03][354255815683950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:09:03][354255815683950][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 24469 11575 24884488 218876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:09:03][354255815683950][300 ms][DEBUG] targetPkg: running [2025-08-23 17:09:03][354255815683950][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 17:09:03][354255815683950][300 ms][DEBUG] START check_boot_completed [2025-08-23 17:09:03][354255815683950][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:09:04][354255815683950][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:09:04][354255815683950][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:09:04][354255815683950][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:09:04][354255815683950][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:09:04][354255815683950][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:09:04][354255815683950][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815683950\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-23 17:09:04][354255815683950][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:09:04][354255815683950][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815683950\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-23 17:09:08][354255815683950][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afcd79f0-4865-41b6-9c93-372782fd6f72","id":"QR_afcd79f0-4865-41b6-9c93-372782fd6f72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:09:08][354255815683950][4799 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-23 17:09:08][354255815683950][4799 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-23 17:09:08][354255815683950][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:09:12][352967354044871][0 ms][INFO] === Request start === [2025-08-23 17:09:12][352967354044871][1 ms][DEBUG] START check_scloud [2025-08-23 17:09:12][352967354044871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:09:13][352967354044871][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 24469 11575 25028624 229908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:09:13][352967354044871][302 ms][DEBUG] targetPkg: running [2025-08-23 17:09:13][352967354044871][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 17:09:13][352967354044871][302 ms][DEBUG] START check_boot_completed [2025-08-23 17:09:13][352967354044871][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:09:13][352967354044871][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:09:13][352967354044871][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:09:13][352967354044871][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:09:13][352967354044871][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:09:13][352967354044871][395 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:09:13][352967354044871][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354044871\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3251\"}'\'' -e'"" [2025-08-23 17:09:13][352967354044871][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:09:13][352967354044871][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354044871\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3251\"}'\'' -e'"" [2025-08-23 17:09:17][352967354044871][4379 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 17:09:17][352967354044871][4379 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 17:09:17][352967354044871][4379 ms][WARN] Detected error: Process with pid 24469 either refused to load frida-agent, or terminated during injection [2025-08-23 17:09:17][352967354044871][4379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 17:09:17][352967354044871][4519 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 17:09:17][352967354044871][4519 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 17:09:17][352967354044871][4520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 17:09:17][352967354044871][4660 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 17:09:17][352967354044871][4660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 17:09:17][352967354044871][4832 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 17:09:19][352967354044871][6847 ms][DEBUG] START check_boot_completed [2025-08-23 17:09:19][352967354044871][6847 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:09:19][352967354044871][6894 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:09:19][352967354044871][6894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:09:19][352967354044871][6940 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:09:19][352967354044871][6940 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:09:22][352967354044871][9955 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 17:09:22][352967354044871][9955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354044871\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3251\"}'\'' -e'"" [2025-08-23 17:09:27][352967354044871][15001 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_545e0fba-fe10-47fe-83b5-50b1034e13b3","id":"QR_545e0fba-fe10-47fe-83b5-50b1034e13b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:09:28][352967354044871][15157 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-23 17:09:28][352967354044871][15157 ms][DEBUG] END runCmdUntilRes#2 in 5202 ms [2025-08-23 17:09:28][352967354044871][15158 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:10:04][351978523203265][0 ms][INFO] === Request start === [2025-08-23 17:10:04][351978523203265][1 ms][DEBUG] START check_scloud [2025-08-23 17:10:04][351978523203265][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:10:04][351978523203265][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 26292 11575 23707636 129164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:10:04][351978523203265][310 ms][DEBUG] targetPkg: running [2025-08-23 17:10:04][351978523203265][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 17:10:04][351978523203265][310 ms][DEBUG] START check_boot_completed [2025-08-23 17:10:04][351978523203265][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:10:04][351978523203265][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:10:04][351978523203265][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:10:04][351978523203265][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:10:04][351978523203265][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:10:04][351978523203265][419 ms][DEBUG] START check_internet [2025-08-23 17:10:04][351978523203265][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:10:04][351978523203265][765 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.300/141.300/141.300/0.000 ms\n [2025-08-23 17:10:04][351978523203265][765 ms][DEBUG] check_internet: online [2025-08-23 17:10:04][351978523203265][765 ms][DEBUG] END check_internet in 345 ms [2025-08-23 17:10:04][351978523203265][765 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:10:04][351978523203265][765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523203265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3244\"}'\'' -e'"" [2025-08-23 17:10:04][351978523203265][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:10:04][351978523203265][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523203265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3244\"}'\'' -e'"" [2025-08-23 17:10:09][351978523203265][5043 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_499c42ce-dc84-407d-b508-97bfbfc49d7b","id":"QR_499c42ce-dc84-407d-b508-97bfbfc49d7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:10:09][351978523203265][5199 ms][DEBUG] proc_open done in 4434 ms; code=255; res.len=3343 [2025-08-23 17:10:09][351978523203265][5199 ms][DEBUG] END runCmdUntilRes#1 in 4434 ms [2025-08-23 17:10:09][351978523203265][5199 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:10:13][358543583430720][0 ms][INFO] === Request start === [2025-08-23 17:10:13][358543583430720][1 ms][DEBUG] START check_scloud [2025-08-23 17:10:13][358543583430720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:10:14][358543583430720][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 26292 11575 23856400 139808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:10:14][358543583430720][293 ms][DEBUG] targetPkg: running [2025-08-23 17:10:14][358543583430720][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-23 17:10:14][358543583430720][293 ms][DEBUG] START check_boot_completed [2025-08-23 17:10:14][358543583430720][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:10:14][358543583430720][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:10:14][358543583430720][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:10:14][358543583430720][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:10:14][358543583430720][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:10:14][358543583430720][386 ms][DEBUG] START check_internet [2025-08-23 17:10:14][358543583430720][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.463/248.463/248.463/0.000 ms\n [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] check_internet: online [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] END check_internet in 359 ms [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:10:14][358543583430720][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583430720\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8981\"}'\'' -e'"" [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:10:14][358543583430720][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583430720\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8981\"}'\'' -e'"" [2025-08-23 17:10:19][358543583430720][5807 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a1ce3f2-d384-433f-b3ab-2f98f21f9859","id":"QR_1a1ce3f2-d384-433f-b3ab-2f98f21f9859","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:10:19][358543583430720][5963 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-23 17:10:19][358543583430720][5963 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-23 17:10:19][358543583430720][5963 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:11:03][357576777590520][0 ms][INFO] === Request start === [2025-08-23 17:11:03][357576777590520][1 ms][DEBUG] START check_scloud [2025-08-23 17:11:03][357576777590520][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:11:03][357576777590520][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 26292 11575 23949712 151532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:11:03][357576777590520][299 ms][DEBUG] targetPkg: running [2025-08-23 17:11:03][357576777590520][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 17:11:03][357576777590520][299 ms][DEBUG] START check_boot_completed [2025-08-23 17:11:03][357576777590520][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:11:03][357576777590520][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:11:03][357576777590520][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:11:03][357576777590520][378 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 17:11:03][357576777590520][378 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 17:11:03][357576777590520][378 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:11:03][357576777590520][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777590520\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3515\"}'\'' -e'"" [2025-08-23 17:11:03][357576777590520][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:11:03][357576777590520][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777590520\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3515\"}'\'' -e'"" [2025-08-23 17:11:08][357576777590520][4704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_473a7a84-ecd2-4aa0-aa1b-5716926819bd","id":"QR_473a7a84-ecd2-4aa0-aa1b-5716926819bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:11:08][357576777590520][4860 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-23 17:11:08][357576777590520][4860 ms][DEBUG] END runCmdUntilRes#1 in 4482 ms [2025-08-23 17:11:08][357576777590520][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:12:03][356413252156943][1 ms][INFO] === Request start === [2025-08-23 17:12:03][356413252156943][1 ms][DEBUG] START check_scloud [2025-08-23 17:12:03][356413252156943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:12:03][356413252156943][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 26292 11575 24096040 162460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:12:03][356413252156943][313 ms][DEBUG] targetPkg: running [2025-08-23 17:12:03][356413252156943][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 17:12:03][356413252156943][313 ms][DEBUG] START check_boot_completed [2025-08-23 17:12:03][356413252156943][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:12:03][356413252156943][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:12:03][356413252156943][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:12:03][356413252156943][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:12:03][356413252156943][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:12:03][356413252156943][391 ms][DEBUG] START check_internet [2025-08-23 17:12:03][356413252156943][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:12:04][356413252156943][922 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.792/200.792/200.792/0.000 ms\n [2025-08-23 17:12:04][356413252156943][922 ms][DEBUG] check_internet: online [2025-08-23 17:12:04][356413252156943][922 ms][DEBUG] END check_internet in 531 ms [2025-08-23 17:12:04][356413252156943][922 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:12:04][356413252156943][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413252156943\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6719\"}'\'' -e'"" [2025-08-23 17:12:04][356413252156943][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:12:04][356413252156943][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413252156943\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6719\"}'\'' -e'"" [2025-08-23 17:12:08][356413252156943][5108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c366b41-ee8b-47b8-a84c-0035bd98f3a1","id":"QR_2c366b41-ee8b-47b8-a84c-0035bd98f3a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:12:08][356413252156943][5264 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-23 17:12:08][356413252156943][5265 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-23 17:12:08][356413252156943][5265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:12:37][350363934270214][0 ms][INFO] === Request start === [2025-08-23 17:12:37][350363934270214][1 ms][DEBUG] START check_scloud [2025-08-23 17:12:37][350363934270214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:12:38][350363934270214][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 26292 11575 24201676 174336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:12:38][350363934270214][288 ms][DEBUG] targetPkg: running [2025-08-23 17:12:38][350363934270214][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-23 17:12:38][350363934270214][289 ms][DEBUG] START check_boot_completed [2025-08-23 17:12:38][350363934270214][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:12:38][350363934270214][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:12:38][350363934270214][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:12:38][350363934270214][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:12:38][350363934270214][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:12:38][350363934270214][398 ms][DEBUG] START check_internet [2025-08-23 17:12:38][350363934270214][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.856/258.856/258.856/0.000 ms\n [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] check_internet: online [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] END check_internet in 390 ms [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:12:38][350363934270214][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350363934270214\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2625\"}'\'' -e'"" [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:12:38][350363934270214][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350363934270214\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2625\"}'\'' -e'"" [2025-08-23 17:12:42][350363934270214][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e13c1ff0-4bff-474d-88dc-8d51ec1c0ab6","id":"QR_e13c1ff0-4bff-474d-88dc-8d51ec1c0ab6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:12:42][350363934270214][4943 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 17:12:42][350363934270214][4943 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 17:12:42][350363934270214][4943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:14:03][352501917728827][0 ms][INFO] === Request start === [2025-08-23 17:14:03][352501917728827][1 ms][DEBUG] START check_scloud [2025-08-23 17:14:03][352501917728827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:14:03][352501917728827][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26292 11575 24343120 185160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:14:03][352501917728827][308 ms][DEBUG] targetPkg: running [2025-08-23 17:14:03][352501917728827][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 17:14:03][352501917728827][308 ms][DEBUG] START check_boot_completed [2025-08-23 17:14:03][352501917728827][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:14:04][352501917728827][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:14:04][352501917728827][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:14:04][352501917728827][403 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 17:14:04][352501917728827][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 17:14:04][352501917728827][404 ms][DEBUG] START check_internet [2025-08-23 17:14:04][352501917728827][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.177/185.177/185.177/0.000 ms\n [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] check_internet: online [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] END check_internet in 295 ms [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:14:04][352501917728827][699 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501917728827\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6797\"}'\'' -e'"" [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:14:04][352501917728827][699 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501917728827\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6797\"}'\'' -e'"" [2025-08-23 17:14:08][352501917728827][4822 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c53db95e-6cf3-4f03-8cf3-6b3f7d64902b","id":"QR_c53db95e-6cf3-4f03-8cf3-6b3f7d64902b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:14:08][352501917728827][4979 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 17:14:08][352501917728827][4979 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 17:14:08][352501917728827][4979 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:14:11][356007117846191][1 ms][INFO] === Request start === [2025-08-23 17:14:11][356007117846191][1 ms][DEBUG] START check_scloud [2025-08-23 17:14:11][356007117846191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:14:11][356007117846191][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26292 11575 24526040 196928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:14:11][356007117846191][308 ms][DEBUG] targetPkg: running [2025-08-23 17:14:11][356007117846191][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 17:14:11][356007117846191][309 ms][DEBUG] START check_boot_completed [2025-08-23 17:14:11][356007117846191][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:14:11][356007117846191][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:14:11][356007117846191][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:14:11][356007117846191][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:14:11][356007117846191][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:14:11][356007117846191][418 ms][DEBUG] START check_internet [2025-08-23 17:14:11][356007117846191][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.106/254.106/254.106/0.000 ms\n [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] check_internet: online [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] END check_internet in 359 ms [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:14:12][356007117846191][777 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007117846191\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:14:12][356007117846191][777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007117846191\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-08-23 17:14:16][356007117846191][4932 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eab81417-0871-4ea0-84e5-e4860353c585","id":"QR_eab81417-0871-4ea0-84e5-e4860353c585","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:14:16][356007117846191][5088 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 17:14:16][356007117846191][5089 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 17:14:16][356007117846191][5089 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:19:03][356908780136218][1 ms][INFO] === Request start === [2025-08-23 17:19:03][356908780136218][1 ms][DEBUG] START check_scloud [2025-08-23 17:19:03][356908780136218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:19:03][356908780136218][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 26292 11575 24656088 208660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:19:03][356908780136218][312 ms][DEBUG] targetPkg: running [2025-08-23 17:19:03][356908780136218][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 17:19:03][356908780136218][312 ms][DEBUG] START check_boot_completed [2025-08-23 17:19:03][356908780136218][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:19:03][356908780136218][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:19:03][356908780136218][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:19:03][356908780136218][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:19:03][356908780136218][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:19:03][356908780136218][390 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:19:03][356908780136218][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780136218\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4278\"}'\'' -e'"" [2025-08-23 17:19:03][356908780136218][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:19:03][356908780136218][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780136218\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4278\"}'\'' -e'"" [2025-08-23 17:19:08][356908780136218][4873 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03b34164-bbb3-4c3e-9ba4-7912bf177fe6","id":"QR_03b34164-bbb3-4c3e-9ba4-7912bf177fe6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:19:08][356908780136218][5029 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-23 17:19:08][356908780136218][5029 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-08-23 17:19:08][356908780136218][5029 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:21:03][351017184427986][0 ms][INFO] === Request start === [2025-08-23 17:21:03][351017184427986][1 ms][DEBUG] START check_scloud [2025-08-23 17:21:03][351017184427986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:21:03][351017184427986][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 26292 11575 24772028 219624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:21:03][351017184427986][316 ms][DEBUG] targetPkg: running [2025-08-23 17:21:03][351017184427986][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 17:21:03][351017184427986][316 ms][DEBUG] START check_boot_completed [2025-08-23 17:21:03][351017184427986][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:21:03][351017184427986][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:21:03][351017184427986][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:21:03][351017184427986][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:21:03][351017184427986][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:21:03][351017184427986][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:21:03][351017184427986][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184427986\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-08-23 17:21:03][351017184427986][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:21:03][351017184427986][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184427986\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-08-23 17:21:07][351017184427986][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93e85f03-bbc7-417d-a221-6387e56b6152","id":"QR_93e85f03-bbc7-417d-a221-6387e56b6152","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:21:08][351017184427986][4783 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-23 17:21:08][351017184427986][4783 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-23 17:21:08][351017184427986][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:21:12][353472170444644][1 ms][INFO] === Request start === [2025-08-23 17:21:12][353472170444644][1 ms][DEBUG] START check_scloud [2025-08-23 17:21:12][353472170444644][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:21:12][353472170444644][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 26292 11575 24908292 231252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:21:12][353472170444644][297 ms][DEBUG] targetPkg: running [2025-08-23 17:21:12][353472170444644][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 17:21:12][353472170444644][297 ms][DEBUG] START check_boot_completed [2025-08-23 17:21:12][353472170444644][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:21:12][353472170444644][342 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 17:21:12][353472170444644][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:21:12][353472170444644][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:21:12][353472170444644][389 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 17:21:12][353472170444644][389 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:21:12][353472170444644][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472170444644\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6310\"}'\'' -e'"" [2025-08-23 17:21:12][353472170444644][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:21:12][353472170444644][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472170444644\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6310\"}'\'' -e'"" [2025-08-23 17:21:18][353472170444644][5825 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b13ac322-84f0-4f6a-adf0-c706cb215577","id":"QR_b13ac322-84f0-4f6a-adf0-c706cb215577","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:21:18][353472170444644][5981 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-23 17:21:18][353472170444644][5981 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-23 17:21:18][353472170444644][5981 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:21:23][352001414414377][1 ms][INFO] === Request start === [2025-08-23 17:21:23][352001414414377][1 ms][DEBUG] START check_scloud [2025-08-23 17:21:23][352001414414377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:21:23][352001414414377][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 26292 11575 25048844 242268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:21:23][352001414414377][258 ms][DEBUG] targetPkg: running [2025-08-23 17:21:23][352001414414377][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 17:21:23][352001414414377][258 ms][DEBUG] START check_boot_completed [2025-08-23 17:21:23][352001414414377][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:21:23][352001414414377][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:21:23][352001414414377][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:21:23][352001414414377][398 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 17:21:23][352001414414377][398 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 17:21:23][352001414414377][398 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:21:23][352001414414377][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414414377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1495\"}'\'' -e'"" [2025-08-23 17:21:23][352001414414377][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:21:23][352001414414377][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414414377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1495\"}'\'' -e'"" [2025-08-23 17:21:27][352001414414377][4178 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 17:21:27][352001414414377][4178 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-23 17:21:27][352001414414377][4178 ms][WARN] Detected error: Process with pid 26292 either refused to load frida-agent, or terminated during injection [2025-08-23 17:21:27][352001414414377][4178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 17:21:27][352001414414377][4334 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 17:21:27][352001414414377][4334 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 17:21:27][352001414414377][4334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 17:21:27][352001414414377][4506 ms][DEBUG] SU: done in 172 ms; out [2025-08-23 17:21:27][352001414414377][4506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 17:21:27][352001414414377][4662 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 17:21:29][352001414414377][6677 ms][DEBUG] START check_boot_completed [2025-08-23 17:21:29][352001414414377][6677 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:21:29][352001414414377][6724 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:21:29][352001414414377][6724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:21:30][352001414414377][6818 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 17:21:30][352001414414377][6818 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 17:21:33][352001414414377][9833 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 17:21:33][352001414414377][9833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414414377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1495\"}'\'' -e'"" [2025-08-23 17:21:37][352001414414377][13832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22fd7760-d866-470b-824a-ee7f981160e7","id":"QR_22fd7760-d866-470b-824a-ee7f981160e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:21:37][352001414414377][13988 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 17:21:37][352001414414377][13988 ms][DEBUG] END runCmdUntilRes#2 in 4156 ms [2025-08-23 17:21:37][352001414414377][13988 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:24:03][352953551737913][1 ms][INFO] === Request start === [2025-08-23 17:24:03][352953551737913][1 ms][DEBUG] START check_scloud [2025-08-23 17:24:03][352953551737913][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:24:04][352953551737913][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 27691 11575 23771620 128580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:24:04][352953551737913][318 ms][DEBUG] targetPkg: running [2025-08-23 17:24:04][352953551737913][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 17:24:04][352953551737913][318 ms][DEBUG] START check_boot_completed [2025-08-23 17:24:04][352953551737913][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:24:04][352953551737913][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:24:04][352953551737913][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:24:04][352953551737913][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:24:04][352953551737913][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:24:04][352953551737913][396 ms][DEBUG] START check_internet [2025-08-23 17:24:04][352953551737913][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.296/201.296/201.296/0.000 ms\n [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] check_internet: online [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] END check_internet in 453 ms [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:24:04][352953551737913][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352953551737913\",\"model\":\"SM-A736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:24:04][352953551737913][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352953551737913\",\"model\":\"SM-A736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-08-23 17:24:09][352953551737913][5285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95622c06-cb70-475c-ae1c-6b77668f9c34","id":"QR_95622c06-cb70-475c-ae1c-6b77668f9c34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:24:09][352953551737913][5441 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 17:24:09][352953551737913][5442 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 17:24:09][352953551737913][5442 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:26:03][352630602181164][0 ms][INFO] === Request start === [2025-08-23 17:26:03][352630602181164][1 ms][DEBUG] START check_scloud [2025-08-23 17:26:03][352630602181164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:26:03][352630602181164][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 27691 11575 23904740 109956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:26:03][352630602181164][332 ms][DEBUG] targetPkg: running [2025-08-23 17:26:03][352630602181164][332 ms][DEBUG] END check_scloud in 331 ms [2025-08-23 17:26:03][352630602181164][332 ms][DEBUG] START check_boot_completed [2025-08-23 17:26:03][352630602181164][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:26:03][352630602181164][379 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:26:03][352630602181164][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:26:03][352630602181164][441 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:26:03][352630602181164][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:26:03][352630602181164][441 ms][DEBUG] START check_internet [2025-08-23 17:26:03][352630602181164][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.890/231.890/231.890/0.000 ms\n [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] check_internet: online [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] END check_internet in 375 ms [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:26:04][352630602181164][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630602181164\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:26:04][352630602181164][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630602181164\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-08-23 17:26:08][352630602181164][5159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d141c3f0-5e8e-4770-a2c9-2cdbf442b7dd","id":"QR_d141c3f0-5e8e-4770-a2c9-2cdbf442b7dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:26:08][352630602181164][5315 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-23 17:26:08][352630602181164][5315 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-23 17:26:08][352630602181164][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:27:04][353459964004072][1 ms][INFO] === Request start === [2025-08-23 17:27:04][353459964004072][1 ms][DEBUG] START check_scloud [2025-08-23 17:27:04][353459964004072][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:27:05][353459964004072][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27691 11575 24020552 122256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:27:05][353459964004072][297 ms][DEBUG] targetPkg: running [2025-08-23 17:27:05][353459964004072][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 17:27:05][353459964004072][297 ms][DEBUG] START check_boot_completed [2025-08-23 17:27:05][353459964004072][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:27:05][353459964004072][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:27:05][353459964004072][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:27:05][353459964004072][438 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 17:27:05][353459964004072][438 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 17:27:05][353459964004072][438 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:27:05][353459964004072][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459964004072\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-08-23 17:27:05][353459964004072][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:27:05][353459964004072][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459964004072\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-08-23 17:27:10][353459964004072][6014 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf7172a4-1b1c-40f4-887a-9d226c804bfe","id":"QR_cf7172a4-1b1c-40f4-887a-9d226c804bfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:27:11][353459964004072][6170 ms][DEBUG] proc_open done in 5732 ms; code=255; res.len=3343 [2025-08-23 17:27:11][353459964004072][6170 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-08-23 17:27:11][353459964004072][6170 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:28:03][355714282579215][0 ms][INFO] === Request start === [2025-08-23 17:28:03][355714282579215][1 ms][DEBUG] START check_scloud [2025-08-23 17:28:03][355714282579215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:28:03][355714282579215][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 27691 11575 24167212 139304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:28:03][355714282579215][278 ms][DEBUG] targetPkg: running [2025-08-23 17:28:03][355714282579215][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 17:28:03][355714282579215][278 ms][DEBUG] START check_boot_completed [2025-08-23 17:28:03][355714282579215][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:28:03][355714282579215][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:28:03][355714282579215][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:28:03][355714282579215][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:28:03][355714282579215][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:28:03][355714282579215][356 ms][DEBUG] START check_internet [2025-08-23 17:28:03][355714282579215][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:28:03][355714282579215][715 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.184/221.184/221.184/0.000 ms\n [2025-08-23 17:28:03][355714282579215][715 ms][DEBUG] check_internet: online [2025-08-23 17:28:03][355714282579215][715 ms][DEBUG] END check_internet in 359 ms [2025-08-23 17:28:03][355714282579215][715 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:28:03][355714282579215][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282579215\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6372\"}'\'' -e'"" [2025-08-23 17:28:03][355714282579215][716 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:28:03][355714282579215][716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282579215\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6372\"}'\'' -e'"" [2025-08-23 17:28:08][355714282579215][5073 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_091ebbc5-be0a-4d2c-9408-5bada6f25b9a","id":"QR_091ebbc5-be0a-4d2c-9408-5bada6f25b9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:28:08][355714282579215][5229 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-23 17:28:08][355714282579215][5229 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-23 17:28:08][355714282579215][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:28:10][350824192137924][0 ms][INFO] === Request start === [2025-08-23 17:28:10][350824192137924][1 ms][DEBUG] START check_scloud [2025-08-23 17:28:10][350824192137924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:28:11][350824192137924][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27691 11575 24324148 150752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:28:11][350824192137924][314 ms][DEBUG] targetPkg: running [2025-08-23 17:28:11][350824192137924][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 17:28:11][350824192137924][314 ms][DEBUG] START check_boot_completed [2025-08-23 17:28:11][350824192137924][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:28:11][350824192137924][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:28:11][350824192137924][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:28:11][350824192137924][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:28:11][350824192137924][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:28:11][350824192137924][392 ms][DEBUG] START check_internet [2025-08-23 17:28:11][350824192137924][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:28:11][350824192137924][751 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=212 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 212.601/212.601/212.601/0.000 ms\n [2025-08-23 17:28:11][350824192137924][751 ms][DEBUG] check_internet: online [2025-08-23 17:28:11][350824192137924][751 ms][DEBUG] END check_internet in 359 ms [2025-08-23 17:28:11][350824192137924][751 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:28:11][350824192137924][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192137924\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3117\"}'\'' -e'"" [2025-08-23 17:28:11][350824192137924][752 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:28:11][350824192137924][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192137924\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3117\"}'\'' -e'"" [2025-08-23 17:28:15][350824192137924][4578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d50a5ace-8040-47d1-96fe-595d1c499c3e","id":"QR_d50a5ace-8040-47d1-96fe-595d1c499c3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:28:15][350824192137924][4734 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-23 17:28:15][350824192137924][4734 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-23 17:28:15][350824192137924][4734 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:29:02][352485222869031][0 ms][INFO] === Request start === [2025-08-23 17:29:02][352485222869031][1 ms][DEBUG] START check_scloud [2025-08-23 17:29:02][352485222869031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:29:02][352485222869031][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27691 11575 24454388 162156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:29:02][352485222869031][314 ms][DEBUG] targetPkg: running [2025-08-23 17:29:02][352485222869031][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 17:29:02][352485222869031][314 ms][DEBUG] START check_boot_completed [2025-08-23 17:29:02][352485222869031][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:29:02][352485222869031][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:29:02][352485222869031][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:29:02][352485222869031][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:29:02][352485222869031][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:29:02][352485222869031][407 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:29:02][352485222869031][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222869031\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3939\"}'\'' -e'"" [2025-08-23 17:29:02][352485222869031][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:29:02][352485222869031][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222869031\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3939\"}'\'' -e'"" [2025-08-23 17:29:06][352485222869031][4406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ee216a1-bfa0-4b29-901c-4c3338366bdd","id":"QR_3ee216a1-bfa0-4b29-901c-4c3338366bdd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:29:06][352485222869031][4562 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 17:29:06][352485222869031][4562 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 17:29:06][352485222869031][4562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:30:02][351771922943478][1 ms][INFO] === Request start === [2025-08-23 17:30:02][351771922943478][1 ms][DEBUG] START check_scloud [2025-08-23 17:30:02][351771922943478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:30:03][351771922943478][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 27691 11575 24574296 173276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:30:03][351771922943478][304 ms][DEBUG] targetPkg: running [2025-08-23 17:30:03][351771922943478][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 17:30:03][351771922943478][304 ms][DEBUG] START check_boot_completed [2025-08-23 17:30:03][351771922943478][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:30:03][351771922943478][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:30:03][351771922943478][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:30:03][351771922943478][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 17:30:03][351771922943478][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:30:03][351771922943478][398 ms][DEBUG] START check_internet [2025-08-23 17:30:03][351771922943478][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:30:03][351771922943478][912 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.263/201.263/201.263/0.000 ms\n [2025-08-23 17:30:03][351771922943478][913 ms][DEBUG] check_internet: online [2025-08-23 17:30:03][351771922943478][913 ms][DEBUG] END check_internet in 515 ms [2025-08-23 17:30:03][351771922943478][913 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:30:03][351771922943478][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922943478\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4691\"}'\'' -e'"" [2025-08-23 17:30:03][351771922943478][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:30:03][351771922943478][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922943478\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4691\"}'\'' -e'"" [2025-08-23 17:30:07][351771922943478][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f92aaed-1eba-4c94-a26d-c20a7362c2a4","id":"QR_9f92aaed-1eba-4c94-a26d-c20a7362c2a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:30:07][351771922943478][5021 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-23 17:30:07][351771922943478][5021 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-23 17:30:07][351771922943478][5021 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:31:06][358680104526253][1 ms][INFO] === Request start === [2025-08-23 17:31:06][358680104526253][1 ms][DEBUG] START check_scloud [2025-08-23 17:31:06][358680104526253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:31:06][358680104526253][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 27691 11575 24696252 178668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:31:06][358680104526253][301 ms][DEBUG] targetPkg: running [2025-08-23 17:31:06][358680104526253][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 17:31:06][358680104526253][301 ms][DEBUG] START check_boot_completed [2025-08-23 17:31:06][358680104526253][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:31:06][358680104526253][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:31:06][358680104526253][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:31:06][358680104526253][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:31:06][358680104526253][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:31:06][358680104526253][394 ms][DEBUG] rawBody.length=1159 [2025-08-23 17:31:06][358680104526253][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680104526253\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WB0CZ1MT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7886\"}'\'' -e'"" [2025-08-23 17:31:06][358680104526253][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:31:06][358680104526253][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680104526253\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WB0CZ1MT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7886\"}'\'' -e'"" [2025-08-23 17:31:12][358680104526253][5830 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b427ca08-a3c3-4607-8d99-5595d77e893b","id":"QR_b427ca08-a3c3-4607-8d99-5595d77e893b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:31:12][358680104526253][5987 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-23 17:31:12][358680104526253][5987 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-23 17:31:12][358680104526253][5987 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:32:02][355857113640290][0 ms][INFO] === Request start === [2025-08-23 17:32:02][355857113640290][1 ms][DEBUG] START check_scloud [2025-08-23 17:32:02][355857113640290][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:32:02][355857113640290][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 27691 11575 24857248 189256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:32:02][355857113640290][323 ms][DEBUG] targetPkg: running [2025-08-23 17:32:02][355857113640290][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 17:32:02][355857113640290][323 ms][DEBUG] START check_boot_completed [2025-08-23 17:32:02][355857113640290][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:32:02][355857113640290][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:32:02][355857113640290][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:32:02][355857113640290][418 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 17:32:02][355857113640290][418 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 17:32:02][355857113640290][418 ms][DEBUG] START check_internet [2025-08-23 17:32:02][355857113640290][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:32:03][355857113640290][994 ms][DEBUG] SU: done in 576 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.126/200.126/200.126/0.000 ms\n [2025-08-23 17:32:03][355857113640290][994 ms][DEBUG] check_internet: online [2025-08-23 17:32:03][355857113640290][994 ms][DEBUG] END check_internet in 576 ms [2025-08-23 17:32:03][355857113640290][994 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:32:03][355857113640290][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113640290\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-23 17:32:03][355857113640290][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:32:03][355857113640290][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113640290\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-23 17:32:07][355857113640290][5134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93c7f481-d16b-4407-b567-147a43dd1077","id":"QR_93c7f481-d16b-4407-b567-147a43dd1077","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:32:07][355857113640290][5290 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 17:32:07][355857113640290][5290 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 17:32:07][355857113640290][5290 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:34:06][352053264003487][1 ms][INFO] === Request start === [2025-08-23 17:34:06][352053264003487][1 ms][DEBUG] START check_scloud [2025-08-23 17:34:06][352053264003487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:34:06][352053264003487][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27691 11575 25007876 201132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:34:06][352053264003487][301 ms][DEBUG] targetPkg: running [2025-08-23 17:34:06][352053264003487][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 17:34:06][352053264003487][301 ms][DEBUG] START check_boot_completed [2025-08-23 17:34:06][352053264003487][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:34:06][352053264003487][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:34:06][352053264003487][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:34:06][352053264003487][410 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 17:34:06][352053264003487][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:34:06][352053264003487][410 ms][DEBUG] START check_internet [2025-08-23 17:34:06][352053264003487][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:34:07][352053264003487][770 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.439/253.439/253.439/0.000 ms\n [2025-08-23 17:34:07][352053264003487][770 ms][DEBUG] check_internet: online [2025-08-23 17:34:07][352053264003487][771 ms][DEBUG] END check_internet in 361 ms [2025-08-23 17:34:07][352053264003487][771 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:34:07][352053264003487][771 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1139\"}'\'' -e'"" [2025-08-23 17:34:07][352053264003487][771 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:34:07][352053264003487][771 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1139\"}'\'' -e'"" [2025-08-23 17:34:11][352053264003487][4893 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 17:34:11][352053264003487][5049 ms][DEBUG] proc_open done in 4278 ms; code=255; res.len=107 [2025-08-23 17:34:11][352053264003487][5049 ms][DEBUG] END runCmdUntilRes#1 in 4278 ms [2025-08-23 17:34:11][352053264003487][5049 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 17:34:11][][0 ms][INFO] === Request start === [2025-08-23 17:34:11][][1 ms][DEBUG] START check_scloud [2025-08-23 17:34:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:34:12][][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 27691 11575 25175056 211432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:34:12][][292 ms][DEBUG] targetPkg: running [2025-08-23 17:34:12][][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 17:34:12][][292 ms][DEBUG] START check_boot_completed [2025-08-23 17:34:12][][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:34:12][][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:34:12][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:34:12][][432 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 17:34:12][][432 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 17:34:12][][432 ms][DEBUG] START check_internet [2025-08-23 17:34:12][][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:34:12][][682 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.435/136.435/136.435/0.000 ms\n [2025-08-23 17:34:12][][682 ms][DEBUG] check_internet: online [2025-08-23 17:34:12][][682 ms][DEBUG] END check_internet in 250 ms [2025-08-23 17:34:12][][682 ms][DEBUG] rawBody.length=1130 [2025-08-23 17:34:12][][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50R897P\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5231\"}'\'' -e'"" [2025-08-23 17:34:12][][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:34:12][][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50R897P\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5231\"}'\'' -e'"" [2025-08-23 17:34:16][][4868 ms][DEBUG] proc_open done in 4187 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 17:34:16][][4869 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-23 17:34:16][][4869 ms][WARN] Detected error: Process with pid 27691 either refused to load frida-agent, or terminated during injection [2025-08-23 17:34:16][][4869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 17:34:16][][5025 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 17:34:16][][5025 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 17:34:16][][5025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 17:34:17][][5165 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 17:34:17][][5165 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 17:34:17][][5339 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 17:34:19][][7352 ms][DEBUG] START check_boot_completed [2025-08-23 17:34:19][][7352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:34:19][][7399 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:34:19][][7399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:34:19][][7461 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:34:19][][7462 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 17:34:22][][10476 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 17:34:22][][10476 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50R897P\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5231\"}'\'' -e'"" [2025-08-23 17:34:27][][15725 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 17:34:27][][15881 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=107 [2025-08-23 17:34:27][][15881 ms][DEBUG] END runCmdUntilRes#2 in 5405 ms [2025-08-23 17:34:27][][15882 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 17:34:28][352053264003487][0 ms][INFO] === Request start === [2025-08-23 17:34:28][352053264003487][1 ms][DEBUG] START check_scloud [2025-08-23 17:34:28][352053264003487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:34:28][352053264003487][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 30465 11575 23740036 124988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:34:28][352053264003487][260 ms][DEBUG] targetPkg: running [2025-08-23 17:34:28][352053264003487][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-23 17:34:28][352053264003487][260 ms][DEBUG] START check_boot_completed [2025-08-23 17:34:28][352053264003487][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:34:28][352053264003487][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:34:28][352053264003487][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:34:28][352053264003487][354 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:34:28][352053264003487][354 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:34:28][352053264003487][354 ms][DEBUG] START check_internet [2025-08-23 17:34:28][352053264003487][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:34:29][352053264003487][635 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.221/175.221/175.221/0.000 ms\n [2025-08-23 17:34:29][352053264003487][635 ms][DEBUG] check_internet: online [2025-08-23 17:34:29][352053264003487][635 ms][DEBUG] END check_internet in 281 ms [2025-08-23 17:34:29][352053264003487][635 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:34:29][352053264003487][635 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5706\"}'\'' -e'"" [2025-08-23 17:34:29][352053264003487][636 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:34:29][352053264003487][636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5706\"}'\'' -e'"" [2025-08-23 17:34:33][352053264003487][5025 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce2c8678-e830-4560-98fd-fdd74aa05188","id":"QR_ce2c8678-e830-4560-98fd-fdd74aa05188","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:34:33][352053264003487][5181 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-23 17:34:33][352053264003487][5181 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-23 17:34:33][352053264003487][5181 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:36:03][352350275228065][0 ms][INFO] === Request start === [2025-08-23 17:36:03][352350275228065][1 ms][DEBUG] START check_scloud [2025-08-23 17:36:03][352350275228065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:36:03][352350275228065][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 30465 11575 23821272 137912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:36:03][352350275228065][263 ms][DEBUG] targetPkg: running [2025-08-23 17:36:03][352350275228065][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 17:36:03][352350275228065][263 ms][DEBUG] START check_boot_completed [2025-08-23 17:36:03][352350275228065][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:36:03][352350275228065][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:36:03][352350275228065][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:36:03][352350275228065][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:36:03][352350275228065][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:36:03][352350275228065][356 ms][DEBUG] START check_internet [2025-08-23 17:36:03][352350275228065][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.198/201.198/201.198/0.000 ms\n [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] check_internet: online [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] END check_internet in 438 ms [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:36:03][352350275228065][793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228065\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3626\"}'\'' -e'"" [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:36:03][352350275228065][793 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228065\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3626\"}'\'' -e'"" [2025-08-23 17:36:08][352350275228065][5057 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a40a8670-a876-4d39-9a83-f930d0fd6521","id":"QR_a40a8670-a876-4d39-9a83-f930d0fd6521","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:36:08][352350275228065][5214 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 17:36:08][352350275228065][5214 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 17:36:08][352350275228065][5214 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:36:11][350048581062945][1 ms][INFO] === Request start === [2025-08-23 17:36:11][350048581062945][1 ms][DEBUG] START check_scloud [2025-08-23 17:36:11][350048581062945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:36:11][350048581062945][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 30465 11575 23949408 149768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:36:11][350048581062945][283 ms][DEBUG] targetPkg: running [2025-08-23 17:36:11][350048581062945][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 17:36:11][350048581062945][284 ms][DEBUG] START check_boot_completed [2025-08-23 17:36:11][350048581062945][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:36:11][350048581062945][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:36:11][350048581062945][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:36:11][350048581062945][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:36:11][350048581062945][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:36:11][350048581062945][393 ms][DEBUG] START check_internet [2025-08-23 17:36:11][350048581062945][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:36:11][350048581062945][753 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.861/249.861/249.861/0.000 ms\n [2025-08-23 17:36:11][350048581062945][753 ms][DEBUG] check_internet: online [2025-08-23 17:36:11][350048581062945][753 ms][DEBUG] END check_internet in 361 ms [2025-08-23 17:36:11][350048581062945][753 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:36:11][350048581062945][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048581062945\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4527\"}'\'' -e'"" [2025-08-23 17:36:11][350048581062945][754 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:36:11][350048581062945][754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048581062945\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4527\"}'\'' -e'"" [2025-08-23 17:36:15][350048581062945][4454 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f1158b9-fcf0-4ee3-a569-9461037c21a8","id":"QR_4f1158b9-fcf0-4ee3-a569-9461037c21a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:36:15][350048581062945][4610 ms][DEBUG] proc_open done in 3856 ms; code=255; res.len=3343 [2025-08-23 17:36:15][350048581062945][4610 ms][DEBUG] END runCmdUntilRes#1 in 3857 ms [2025-08-23 17:36:15][350048581062945][4610 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:37:03][351877473077473][0 ms][INFO] === Request start === [2025-08-23 17:37:03][351877473077473][1 ms][DEBUG] START check_scloud [2025-08-23 17:37:03][351877473077473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:37:03][351877473077473][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30465 11575 24080660 161264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:37:03][351877473077473][316 ms][DEBUG] targetPkg: running [2025-08-23 17:37:03][351877473077473][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 17:37:03][351877473077473][316 ms][DEBUG] START check_boot_completed [2025-08-23 17:37:03][351877473077473][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:37:03][351877473077473][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:37:03][351877473077473][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:37:04][351877473077473][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:37:04][351877473077473][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:37:04][351877473077473][410 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:37:04][351877473077473][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877473077473\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3139\"}'\'' -e'"" [2025-08-23 17:37:04][351877473077473][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:37:04][351877473077473][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877473077473\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3139\"}'\'' -e'"" [2025-08-23 17:37:13][351877473077473][9689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1c93f4c-2d09-46f1-a56e-ab951e137880","id":"QR_c1c93f4c-2d09-46f1-a56e-ab951e137880","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:37:13][351877473077473][9845 ms][DEBUG] proc_open done in 9435 ms; code=255; res.len=3343 [2025-08-23 17:37:13][351877473077473][9845 ms][DEBUG] END runCmdUntilRes#1 in 9435 ms [2025-08-23 17:37:13][351877473077473][9845 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:37:17][350655880549610][0 ms][INFO] === Request start === [2025-08-23 17:37:17][350655880549610][0 ms][DEBUG] START check_scloud [2025-08-23 17:37:17][350655880549610][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:37:18][350655880549610][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 30465 11575 24237660 172264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:37:18][350655880549610][315 ms][DEBUG] targetPkg: running [2025-08-23 17:37:18][350655880549610][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 17:37:18][350655880549610][315 ms][DEBUG] START check_boot_completed [2025-08-23 17:37:18][350655880549610][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:37:18][350655880549610][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:37:18][350655880549610][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:37:18][350655880549610][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:37:18][350655880549610][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:37:18][350655880549610][424 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:37:18][350655880549610][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655880549610\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8625\"}'\'' -e'"" [2025-08-23 17:37:18][350655880549610][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:37:18][350655880549610][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655880549610\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8625\"}'\'' -e'"" [2025-08-23 17:37:24][350655880549610][6688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_280af668-5ca0-455a-941b-7a5b565b8027","id":"QR_280af668-5ca0-455a-941b-7a5b565b8027","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:37:24][350655880549610][6844 ms][DEBUG] proc_open done in 6420 ms; code=255; res.len=3343 [2025-08-23 17:37:24][350655880549610][6844 ms][DEBUG] END runCmdUntilRes#1 in 6420 ms [2025-08-23 17:37:24][350655880549610][6844 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:38:05][353096463619776][0 ms][INFO] === Request start === [2025-08-23 17:38:05][353096463619776][1 ms][DEBUG] START check_scloud [2025-08-23 17:38:05][353096463619776][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:38:05][353096463619776][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 30465 11575 24357532 184244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:38:05][353096463619776][301 ms][DEBUG] targetPkg: running [2025-08-23 17:38:05][353096463619776][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 17:38:05][353096463619776][301 ms][DEBUG] START check_boot_completed [2025-08-23 17:38:05][353096463619776][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:38:05][353096463619776][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:38:05][353096463619776][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:38:05][353096463619776][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:38:05][353096463619776][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:38:05][353096463619776][379 ms][DEBUG] START check_internet [2025-08-23 17:38:05][353096463619776][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:38:05][353096463619776][660 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.449/177.449/177.449/0.000 ms\n [2025-08-23 17:38:05][353096463619776][660 ms][DEBUG] check_internet: online [2025-08-23 17:38:05][353096463619776][660 ms][DEBUG] END check_internet in 282 ms [2025-08-23 17:38:05][353096463619776][660 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:38:05][353096463619776][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096463619776\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4536\"}'\'' -e'"" [2025-08-23 17:38:05][353096463619776][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:38:05][353096463619776][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096463619776\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4536\"}'\'' -e'"" [2025-08-23 17:38:12][353096463619776][7455 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0bf521b-f5d7-4b51-a693-8d9a5da5be3b","id":"QR_e0bf521b-f5d7-4b51-a693-8d9a5da5be3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:38:12][353096463619776][7611 ms][DEBUG] proc_open done in 6950 ms; code=255; res.len=3343 [2025-08-23 17:38:12][353096463619776][7611 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-23 17:38:12][353096463619776][7611 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:38:17][352665189507910][1 ms][INFO] === Request start === [2025-08-23 17:38:17][352665189507910][1 ms][DEBUG] START check_scloud [2025-08-23 17:38:17][352665189507910][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:38:18][352665189507910][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 30465 11575 24487588 194856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:38:18][352665189507910][318 ms][DEBUG] targetPkg: running [2025-08-23 17:38:18][352665189507910][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 17:38:18][352665189507910][318 ms][DEBUG] START check_boot_completed [2025-08-23 17:38:18][352665189507910][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:38:18][352665189507910][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:38:18][352665189507910][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:38:18][352665189507910][443 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 17:38:18][352665189507910][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 17:38:18][352665189507910][443 ms][DEBUG] START check_internet [2025-08-23 17:38:18][352665189507910][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:38:18][352665189507910][724 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.134/142.134/142.134/0.000 ms\n [2025-08-23 17:38:18][352665189507910][724 ms][DEBUG] check_internet: online [2025-08-23 17:38:18][352665189507910][724 ms][DEBUG] END check_internet in 281 ms [2025-08-23 17:38:18][352665189507910][724 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:38:18][352665189507910][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507910\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-08-23 17:38:18][352665189507910][725 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:38:18][352665189507910][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507910\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-08-23 17:38:22][352665189507910][4926 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0b1fc07-230f-4c2a-9dc0-60c17009c9bc","id":"QR_f0b1fc07-230f-4c2a-9dc0-60c17009c9bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:38:22][352665189507910][5082 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 17:38:22][352665189507910][5082 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 17:38:22][352665189507910][5082 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:39:05][353600817212095][1 ms][INFO] === Request start === [2025-08-23 17:39:05][353600817212095][1 ms][DEBUG] START check_scloud [2025-08-23 17:39:05][353600817212095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:39:05][353600817212095][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 30465 11575 24608540 206652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:39:05][353600817212095][297 ms][DEBUG] targetPkg: running [2025-08-23 17:39:05][353600817212095][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 17:39:05][353600817212095][297 ms][DEBUG] START check_boot_completed [2025-08-23 17:39:05][353600817212095][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:39:05][353600817212095][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:39:05][353600817212095][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:39:05][353600817212095][392 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 17:39:05][353600817212095][392 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 17:39:05][353600817212095][392 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:39:05][353600817212095][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600817212095\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2678\"}'\'' -e'"" [2025-08-23 17:39:05][353600817212095][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:39:05][353600817212095][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600817212095\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2678\"}'\'' -e'"" [2025-08-23 17:39:10][353600817212095][5561 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_444600d5-736b-4b39-b750-5122a23cdd45","id":"QR_444600d5-736b-4b39-b750-5122a23cdd45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:39:11][353600817212095][5717 ms][DEBUG] proc_open done in 5324 ms; code=255; res.len=3343 [2025-08-23 17:39:11][353600817212095][5717 ms][DEBUG] END runCmdUntilRes#1 in 5324 ms [2025-08-23 17:39:11][353600817212095][5717 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:39:17][353196210003876][0 ms][INFO] === Request start === [2025-08-23 17:39:17][353196210003876][1 ms][DEBUG] START check_scloud [2025-08-23 17:39:17][353196210003876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:39:17][353196210003876][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 30465 11575 24742820 217240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:39:17][353196210003876][298 ms][DEBUG] targetPkg: running [2025-08-23 17:39:17][353196210003876][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 17:39:17][353196210003876][298 ms][DEBUG] START check_boot_completed [2025-08-23 17:39:17][353196210003876][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:39:17][353196210003876][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 17:39:17][353196210003876][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:39:18][353196210003876][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:39:18][353196210003876][406 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-23 17:39:18][353196210003876][406 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:39:18][353196210003876][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196210003876\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8179\"}'\'' -e'"" [2025-08-23 17:39:18][353196210003876][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:39:18][353196210003876][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196210003876\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8179\"}'\'' -e'"" [2025-08-23 17:39:24][353196210003876][6888 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2187c80-488c-4e2d-a87f-47ec215e8f88","id":"QR_e2187c80-488c-4e2d-a87f-47ec215e8f88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:39:24][353196210003876][7044 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-08-23 17:39:24][353196210003876][7045 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-08-23 17:39:24][353196210003876][7045 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:39:30][352192666652507][0 ms][INFO] === Request start === [2025-08-23 17:39:30][352192666652507][1 ms][DEBUG] START check_scloud [2025-08-23 17:39:30][352192666652507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:39:30][352192666652507][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 30465 11575 24887432 229144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:39:30][352192666652507][297 ms][DEBUG] targetPkg: running [2025-08-23 17:39:30][352192666652507][297 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 17:39:30][352192666652507][297 ms][DEBUG] START check_boot_completed [2025-08-23 17:39:30][352192666652507][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:39:30][352192666652507][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:39:30][352192666652507][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:39:30][352192666652507][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:39:30][352192666652507][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:39:30][352192666652507][375 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:39:30][352192666652507][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666652507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8526\"}'\'' -e'"" [2025-08-23 17:39:30][352192666652507][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:39:30][352192666652507][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666652507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8526\"}'\'' -e'"" [2025-08-23 17:39:34][352192666652507][4624 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15046dc9-25f8-47af-ae3a-013bc80d9c2f","id":"QR_15046dc9-25f8-47af-ae3a-013bc80d9c2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:39:34][352192666652507][4780 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-23 17:39:34][352192666652507][4780 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 17:39:34][352192666652507][4781 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:40:02][351676562039455][0 ms][INFO] === Request start === [2025-08-23 17:40:02][351676562039455][1 ms][DEBUG] START check_scloud [2025-08-23 17:40:02][351676562039455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:40:02][351676562039455][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 30465 11575 24994124 240304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:40:02][351676562039455][301 ms][DEBUG] targetPkg: running [2025-08-23 17:40:02][351676562039455][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 17:40:02][351676562039455][301 ms][DEBUG] START check_boot_completed [2025-08-23 17:40:02][351676562039455][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:40:02][351676562039455][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:40:02][351676562039455][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:40:03][351676562039455][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:40:03][351676562039455][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:40:03][351676562039455][410 ms][DEBUG] START check_internet [2025-08-23 17:40:03][351676562039455][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] SU: done in 563 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.185/202.185/202.185/0.000 ms\n [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] check_internet: online [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] END check_internet in 563 ms [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:40:03][351676562039455][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3881\"}'\'' -e'"" [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:40:03][351676562039455][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3881\"}'\'' -e'"" [2025-08-23 17:40:07][351676562039455][4878 ms][DEBUG] proc_open done in 3904 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 17:40:07][351676562039455][4878 ms][DEBUG] END runCmdUntilRes#1 in 3904 ms [2025-08-23 17:40:07][351676562039455][4878 ms][WARN] Detected error: Process with pid 30465 either refused to load frida-agent, or terminated during injection [2025-08-23 17:40:07][351676562039455][4878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 17:40:07][351676562039455][5034 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 17:40:07][351676562039455][5034 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 17:40:07][351676562039455][5034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 17:40:07][351676562039455][5158 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 17:40:07][351676562039455][5158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 17:40:07][351676562039455][5300 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 17:40:09][351676562039455][7314 ms][DEBUG] START check_boot_completed [2025-08-23 17:40:09][351676562039455][7314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:40:09][351676562039455][7361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:40:09][351676562039455][7361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:40:10][351676562039455][7424 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:40:10][351676562039455][7424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:40:13][351676562039455][10438 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 17:40:13][351676562039455][10439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562039455\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3881\"}'\'' -e'"" [2025-08-23 17:40:16][351676562039455][14313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee609528-c828-4ea1-85d3-817232bad357","id":"QR_ee609528-c828-4ea1-85d3-817232bad357","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:40:17][351676562039455][14469 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-23 17:40:17][351676562039455][14469 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-08-23 17:40:17][351676562039455][14469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:41:03][350532454732239][1 ms][INFO] === Request start === [2025-08-23 17:41:03][350532454732239][1 ms][DEBUG] START check_scloud [2025-08-23 17:41:03][350532454732239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:41:03][350532454732239][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31857 11575 23767572 127876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:41:03][350532454732239][312 ms][DEBUG] targetPkg: running [2025-08-23 17:41:03][350532454732239][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 17:41:03][350532454732239][312 ms][DEBUG] START check_boot_completed [2025-08-23 17:41:03][350532454732239][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:41:03][350532454732239][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:41:03][350532454732239][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:41:03][350532454732239][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:41:03][350532454732239][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:41:03][350532454732239][405 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:41:03][350532454732239][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532454732239\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7250\"}'\'' -e'"" [2025-08-23 17:41:03][350532454732239][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:41:03][350532454732239][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532454732239\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7250\"}'\'' -e'"" [2025-08-23 17:41:08][350532454732239][4560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_232cc93f-cbdb-4e72-93a3-c674a74da492","id":"QR_232cc93f-cbdb-4e72-93a3-c674a74da492","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:41:08][350532454732239][4716 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 17:41:08][350532454732239][4716 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 17:41:08][350532454732239][4716 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:42:03][352549938411709][0 ms][INFO] === Request start === [2025-08-23 17:42:03][352549938411709][1 ms][DEBUG] START check_scloud [2025-08-23 17:42:03][352549938411709][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:42:03][352549938411709][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 31857 11575 23924344 138856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:42:03][352549938411709][278 ms][DEBUG] targetPkg: running [2025-08-23 17:42:03][352549938411709][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 17:42:03][352549938411709][278 ms][DEBUG] START check_boot_completed [2025-08-23 17:42:03][352549938411709][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:42:03][352549938411709][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:42:03][352549938411709][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:42:03][352549938411709][387 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 17:42:03][352549938411709][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:42:03][352549938411709][387 ms][DEBUG] START check_internet [2025-08-23 17:42:03][352549938411709][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:42:04][352549938411709][918 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.211/202.211/202.211/0.000 ms\n [2025-08-23 17:42:04][352549938411709][918 ms][DEBUG] check_internet: online [2025-08-23 17:42:04][352549938411709][918 ms][DEBUG] END check_internet in 531 ms [2025-08-23 17:42:04][352549938411709][919 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:42:04][352549938411709][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938411709\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7981\"}'\'' -e'"" [2025-08-23 17:42:04][352549938411709][919 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:42:04][352549938411709][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938411709\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7981\"}'\'' -e'"" [2025-08-23 17:42:08][352549938411709][5355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99992ee0-d399-4f09-ae1c-5920ea3bd220","id":"QR_99992ee0-d399-4f09-ae1c-5920ea3bd220","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:42:08][352549938411709][5511 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-23 17:42:08][352549938411709][5511 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-23 17:42:08][352549938411709][5511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:43:04][352177392427688][1 ms][INFO] === Request start === [2025-08-23 17:43:04][352177392427688][1 ms][DEBUG] START check_scloud [2025-08-23 17:43:04][352177392427688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:43:04][352177392427688][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 31857 11575 24050540 150196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:43:04][352177392427688][304 ms][DEBUG] targetPkg: running [2025-08-23 17:43:04][352177392427688][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 17:43:04][352177392427688][304 ms][DEBUG] START check_boot_completed [2025-08-23 17:43:04][352177392427688][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:43:04][352177392427688][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:43:04][352177392427688][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:43:04][352177392427688][413 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 17:43:04][352177392427688][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:43:04][352177392427688][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:43:04][352177392427688][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392427688\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-23 17:43:04][352177392427688][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:43:04][352177392427688][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392427688\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-23 17:43:10][352177392427688][5583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa1d321a-21a4-443c-818f-ed5e21793666","id":"QR_aa1d321a-21a4-443c-818f-ed5e21793666","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:43:10][352177392427688][5740 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-23 17:43:10][352177392427688][5740 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-23 17:43:10][352177392427688][5740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:43:15][354127114770483][0 ms][INFO] === Request start === [2025-08-23 17:43:15][354127114770483][1 ms][DEBUG] START check_scloud [2025-08-23 17:43:15][354127114770483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:43:15][354127114770483][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 31857 11575 24215540 161120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:43:15][354127114770483][269 ms][DEBUG] targetPkg: running [2025-08-23 17:43:15][354127114770483][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 17:43:15][354127114770483][269 ms][DEBUG] START check_boot_completed [2025-08-23 17:43:15][354127114770483][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:43:15][354127114770483][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:43:15][354127114770483][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:43:15][354127114770483][409 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 17:43:15][354127114770483][409 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 17:43:15][354127114770483][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:43:15][354127114770483][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354127114770483\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-08-23 17:43:15][354127114770483][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:43:15][354127114770483][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354127114770483\",\"model\":\"SM-G973F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-08-23 17:43:19][354127114770483][4689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7ca2bf2-cf39-4da2-8def-8900e8504d18","id":"QR_f7ca2bf2-cf39-4da2-8def-8900e8504d18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:43:20][354127114770483][4845 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 17:43:20][354127114770483][4845 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 17:43:20][354127114770483][4845 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:44:02][352549939481180][0 ms][INFO] === Request start === [2025-08-23 17:44:02][352549939481180][1 ms][DEBUG] START check_scloud [2025-08-23 17:44:02][352549939481180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:44:03][352549939481180][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 31857 11575 24331252 172764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:44:03][352549939481180][264 ms][DEBUG] targetPkg: running [2025-08-23 17:44:03][352549939481180][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-23 17:44:03][352549939481180][264 ms][DEBUG] START check_boot_completed [2025-08-23 17:44:03][352549939481180][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:44:03][352549939481180][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:44:03][352549939481180][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:44:03][352549939481180][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:44:03][352549939481180][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:44:03][352549939481180][357 ms][DEBUG] START check_internet [2025-08-23 17:44:03][352549939481180][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:44:03][352549939481180][701 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.735/239.735/239.735/0.000 ms\n [2025-08-23 17:44:03][352549939481180][701 ms][DEBUG] check_internet: online [2025-08-23 17:44:03][352549939481180][701 ms][DEBUG] END check_internet in 344 ms [2025-08-23 17:44:03][352549939481180][701 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:44:03][352549939481180][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939481180\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8417\"}'\'' -e'"" [2025-08-23 17:44:03][352549939481180][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:44:03][352549939481180][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939481180\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8417\"}'\'' -e'"" [2025-08-23 17:44:07][352549939481180][4481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54d4d04f-9e67-45f3-826e-89ff15d1d61e","id":"QR_54d4d04f-9e67-45f3-826e-89ff15d1d61e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:44:07][352549939481180][4637 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 17:44:07][352549939481180][4637 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 17:44:07][352549939481180][4637 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:46:03][351270417534439][1 ms][INFO] === Request start === [2025-08-23 17:46:03][351270417534439][1 ms][DEBUG] START check_scloud [2025-08-23 17:46:03][351270417534439][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:46:03][351270417534439][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31857 11575 24463576 183748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:46:03][351270417534439][304 ms][DEBUG] targetPkg: running [2025-08-23 17:46:03][351270417534439][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 17:46:03][351270417534439][304 ms][DEBUG] START check_boot_completed [2025-08-23 17:46:03][351270417534439][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:46:03][351270417534439][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:46:03][351270417534439][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:46:03][351270417534439][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:46:03][351270417534439][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:46:03][351270417534439][398 ms][DEBUG] START check_internet [2025-08-23 17:46:03][351270417534439][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] SU: done in 595 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.275/202.275/202.275/0.000 ms\n [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] check_internet: online [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] END check_internet in 595 ms [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:46:04][351270417534439][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270417534439\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8171\"}'\'' -e'"" [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:46:04][351270417534439][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270417534439\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8171\"}'\'' -e'"" [2025-08-23 17:46:13][351270417534439][10067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_536a8eb4-3e21-4a3e-9bb7-5cc6fad3624a","id":"QR_536a8eb4-3e21-4a3e-9bb7-5cc6fad3624a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:46:13][351270417534439][10224 ms][DEBUG] proc_open done in 9230 ms; code=255; res.len=3343 [2025-08-23 17:46:13][351270417534439][10224 ms][DEBUG] END runCmdUntilRes#1 in 9231 ms [2025-08-23 17:46:13][351270417534439][10224 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:47:03][358780108555884][0 ms][INFO] === Request start === [2025-08-23 17:47:03][358780108555884][1 ms][DEBUG] START check_scloud [2025-08-23 17:47:03][358780108555884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:47:03][358780108555884][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 31857 11575 24593852 195700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:47:03][358780108555884][303 ms][DEBUG] targetPkg: running [2025-08-23 17:47:03][358780108555884][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 17:47:03][358780108555884][303 ms][DEBUG] START check_boot_completed [2025-08-23 17:47:03][358780108555884][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:47:03][358780108555884][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:47:03][358780108555884][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:47:03][358780108555884][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:47:03][358780108555884][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:47:03][358780108555884][412 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:47:03][358780108555884][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780108555884\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1080\"}'\'' -e'"" [2025-08-23 17:47:03][358780108555884][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:47:03][358780108555884][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780108555884\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1080\"}'\'' -e'"" [2025-08-23 17:47:07][358780108555884][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aaf93b22-0c98-459c-a7e3-87bf624b98cd","id":"QR_aaf93b22-0c98-459c-a7e3-87bf624b98cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:47:07][358780108555884][4411 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-23 17:47:07][358780108555884][4411 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-23 17:47:07][358780108555884][4411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:49:03][350504683798455][1 ms][INFO] === Request start === [2025-08-23 17:49:03][350504683798455][1 ms][DEBUG] START check_scloud [2025-08-23 17:49:03][350504683798455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:49:03][350504683798455][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31857 11575 24703648 207232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:49:03][350504683798455][263 ms][DEBUG] targetPkg: running [2025-08-23 17:49:03][350504683798455][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 17:49:03][350504683798455][263 ms][DEBUG] START check_boot_completed [2025-08-23 17:49:03][350504683798455][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:49:03][350504683798455][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:49:03][350504683798455][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:49:03][350504683798455][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:49:03][350504683798455][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:49:03][350504683798455][356 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:49:03][350504683798455][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350504683798455\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9496\"}'\'' -e'"" [2025-08-23 17:49:03][350504683798455][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:49:03][350504683798455][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350504683798455\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9496\"}'\'' -e'"" [2025-08-23 17:49:08][350504683798455][4621 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9992ad96-f6c2-4bc4-9e37-b00a9bad5904","id":"QR_9992ad96-f6c2-4bc4-9e37-b00a9bad5904","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:49:08][350504683798455][4777 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-23 17:49:08][350504683798455][4777 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-23 17:49:08][350504683798455][4777 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:51:04][353610583388797][1 ms][INFO] === Request start === [2025-08-23 17:51:04][353610583388797][1 ms][DEBUG] START check_scloud [2025-08-23 17:51:04][353610583388797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:51:05][353610583388797][350 ms][DEBUG] SU: done in 348 ms; outu0_a118 31857 11575 24842116 214596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:51:05][353610583388797][350 ms][DEBUG] targetPkg: running [2025-08-23 17:51:05][353610583388797][350 ms][DEBUG] END check_scloud in 349 ms [2025-08-23 17:51:05][353610583388797][350 ms][DEBUG] START check_boot_completed [2025-08-23 17:51:05][353610583388797][350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:51:05][353610583388797][381 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:51:05][353610583388797][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:51:05][353610583388797][428 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:51:05][353610583388797][428 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:51:05][353610583388797][428 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:51:05][353610583388797][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353610583388797\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7872\"}'\'' -e'"" [2025-08-23 17:51:05][353610583388797][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:51:05][353610583388797][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353610583388797\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7872\"}'\'' -e'"" [2025-08-23 17:51:10][353610583388797][6333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_139c76f3-20de-48f9-b8ba-a431c87f1de9","id":"QR_139c76f3-20de-48f9-b8ba-a431c87f1de9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:51:11][353610583388797][6489 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-08-23 17:51:11][353610583388797][6489 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-08-23 17:51:11][353610583388797][6489 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:52:05][350033883696608][0 ms][INFO] === Request start === [2025-08-23 17:52:05][350033883696608][1 ms][DEBUG] START check_scloud [2025-08-23 17:52:05][350033883696608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:52:05][350033883696608][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31857 11575 24953832 155584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:52:05][350033883696608][316 ms][DEBUG] targetPkg: running [2025-08-23 17:52:05][350033883696608][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 17:52:05][350033883696608][316 ms][DEBUG] START check_boot_completed [2025-08-23 17:52:05][350033883696608][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:52:05][350033883696608][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:52:05][350033883696608][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:52:05][350033883696608][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:52:05][350033883696608][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:52:05][350033883696608][426 ms][DEBUG] START check_internet [2025-08-23 17:52:05][350033883696608][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:52:06][350033883696608][941 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.882/201.882/201.882/0.000 ms\n [2025-08-23 17:52:06][350033883696608][941 ms][DEBUG] check_internet: online [2025-08-23 17:52:06][350033883696608][942 ms][DEBUG] END check_internet in 516 ms [2025-08-23 17:52:06][350033883696608][942 ms][DEBUG] rawBody.length=1150 [2025-08-23 17:52:06][350033883696608][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033883696608\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7966\"}'\'' -e'"" [2025-08-23 17:52:06][350033883696608][942 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:52:06][350033883696608][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033883696608\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7966\"}'\'' -e'"" [2025-08-23 17:52:12][350033883696608][7736 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f92ef55-f9f3-41c4-a64f-5a9b8962bc99","id":"QR_8f92ef55-f9f3-41c4-a64f-5a9b8962bc99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:52:13][350033883696608][7892 ms][DEBUG] proc_open done in 6950 ms; code=255; res.len=3343 [2025-08-23 17:52:13][350033883696608][7892 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-23 17:52:13][350033883696608][7892 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:53:03][356214463418084][0 ms][INFO] === Request start === [2025-08-23 17:53:03][356214463418084][1 ms][DEBUG] START check_scloud [2025-08-23 17:53:03][356214463418084][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:53:04][356214463418084][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31857 11575 25095432 166528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:53:04][356214463418084][316 ms][DEBUG] targetPkg: running [2025-08-23 17:53:04][356214463418084][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 17:53:04][356214463418084][316 ms][DEBUG] START check_boot_completed [2025-08-23 17:53:04][356214463418084][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:53:04][356214463418084][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:53:04][356214463418084][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:53:04][356214463418084][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:53:04][356214463418084][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:53:04][356214463418084][394 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:53:04][356214463418084][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463418084\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EGY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-08-23 17:53:04][356214463418084][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:53:04][356214463418084][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463418084\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EGY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-08-23 17:53:08][356214463418084][4612 ms][DEBUG] proc_open done in 4218 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 17:53:08][356214463418084][4612 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-23 17:53:08][356214463418084][4613 ms][WARN] Detected error: Process with pid 31857 either refused to load frida-agent, or terminated during injection [2025-08-23 17:53:08][356214463418084][4613 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 17:53:08][356214463418084][4799 ms][DEBUG] SU: done in 187 ms; out [2025-08-23 17:53:08][356214463418084][4800 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 17:53:08][356214463418084][4800 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 17:53:08][356214463418084][4940 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 17:53:08][356214463418084][4940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 17:53:09][356214463418084][5096 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 17:53:11][356214463418084][7111 ms][DEBUG] START check_boot_completed [2025-08-23 17:53:11][356214463418084][7111 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:53:11][356214463418084][7142 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:53:11][356214463418084][7142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:53:11][356214463418084][7189 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:53:11][356214463418084][7189 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:53:14][356214463418084][10204 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 17:53:14][356214463418084][10204 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463418084\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EGY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-08-23 17:53:18][356214463418084][14344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54a414e6-23de-4ceb-960b-400c6ef4f377","id":"QR_54a414e6-23de-4ceb-960b-400c6ef4f377","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:53:18][356214463418084][14500 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 17:53:18][356214463418084][14500 ms][DEBUG] END runCmdUntilRes#2 in 4296 ms [2025-08-23 17:53:18][356214463418084][14500 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:55:03][353548757880761][1 ms][INFO] === Request start === [2025-08-23 17:55:03][353548757880761][1 ms][DEBUG] START check_scloud [2025-08-23 17:55:03][353548757880761][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:55:03][353548757880761][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 1810 11575 23758896 128192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:55:03][353548757880761][283 ms][DEBUG] targetPkg: running [2025-08-23 17:55:03][353548757880761][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 17:55:03][353548757880761][283 ms][DEBUG] START check_boot_completed [2025-08-23 17:55:03][353548757880761][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:55:03][353548757880761][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:55:03][353548757880761][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:55:03][353548757880761][362 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 17:55:03][353548757880761][362 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 17:55:03][353548757880761][362 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:55:03][353548757880761][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757880761\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9182\"}'\'' -e'"" [2025-08-23 17:55:03][353548757880761][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:55:03][353548757880761][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757880761\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9182\"}'\'' -e'"" [2025-08-23 17:55:07][353548757880761][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d68c30e-01b1-4ba2-a553-747d356179d2","id":"QR_2d68c30e-01b1-4ba2-a553-747d356179d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:55:07][353548757880761][4719 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-23 17:55:07][353548757880761][4719 ms][DEBUG] END runCmdUntilRes#1 in 4357 ms [2025-08-23 17:55:07][353548757880761][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:56:05][357576774899510][0 ms][INFO] === Request start === [2025-08-23 17:56:05][357576774899510][1 ms][DEBUG] START check_scloud [2025-08-23 17:56:05][357576774899510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:56:05][357576774899510][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 1810 11575 23885768 139128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:56:05][357576774899510][302 ms][DEBUG] targetPkg: running [2025-08-23 17:56:05][357576774899510][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 17:56:05][357576774899510][302 ms][DEBUG] START check_boot_completed [2025-08-23 17:56:05][357576774899510][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:56:05][357576774899510][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:56:05][357576774899510][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:56:05][357576774899510][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:56:05][357576774899510][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 17:56:05][357576774899510][396 ms][DEBUG] START check_internet [2025-08-23 17:56:05][357576774899510][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:56:06][357576774899510][864 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.012/201.012/201.012/0.000 ms\n [2025-08-23 17:56:06][357576774899510][864 ms][DEBUG] check_internet: online [2025-08-23 17:56:06][357576774899510][864 ms][DEBUG] END check_internet in 469 ms [2025-08-23 17:56:06][357576774899510][865 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:56:06][357576774899510][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576774899510\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5333\"}'\'' -e'"" [2025-08-23 17:56:06][357576774899510][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:56:06][357576774899510][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576774899510\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5333\"}'\'' -e'"" [2025-08-23 17:56:11][357576774899510][6425 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54368f85-1f49-4030-b999-8b4a0c380570","id":"QR_54368f85-1f49-4030-b999-8b4a0c380570","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:56:11][357576774899510][6582 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-23 17:56:11][357576774899510][6582 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-23 17:56:11][357576774899510][6582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:57:05][354775290247849][1 ms][INFO] === Request start === [2025-08-23 17:57:05][354775290247849][1 ms][DEBUG] START check_scloud [2025-08-23 17:57:05][354775290247849][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:57:05][354775290247849][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 1810 11575 24001260 150596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:57:05][354775290247849][311 ms][DEBUG] targetPkg: running [2025-08-23 17:57:05][354775290247849][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 17:57:05][354775290247849][311 ms][DEBUG] START check_boot_completed [2025-08-23 17:57:05][354775290247849][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:57:05][354775290247849][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:57:05][354775290247849][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:57:05][354775290247849][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 17:57:05][354775290247849][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 17:57:05][354775290247849][420 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:57:05][354775290247849][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-08-23 17:57:05][354775290247849][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:57:05][354775290247849][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-08-23 17:57:09][354775290247849][4513 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 17:57:10][354775290247849][4669 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=115 [2025-08-23 17:57:10][354775290247849][4669 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 17:57:10][354775290247849][4669 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 17:57:10][][0 ms][INFO] === Request start === [2025-08-23 17:57:10][][1 ms][DEBUG] START check_scloud [2025-08-23 17:57:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:57:10][][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 1810 11575 24145716 161524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:57:10][][267 ms][DEBUG] targetPkg: running [2025-08-23 17:57:10][][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-23 17:57:10][][267 ms][DEBUG] START check_boot_completed [2025-08-23 17:57:10][][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:57:10][][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 17:57:10][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:57:10][][392 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 17:57:10][][392 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 17:57:10][][392 ms][DEBUG] rawBody.length=1130 [2025-08-23 17:57:10][][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA2C5B0J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1791\"}'\'' -e'"" [2025-08-23 17:57:10][][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:57:10][][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA2C5B0J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1791\"}'\'' -e'"" [2025-08-23 17:57:16][][5453 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 17:57:16][][5609 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=115 [2025-08-23 17:57:16][][5609 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-23 17:57:16][][5609 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 17:57:16][354775290247849][0 ms][INFO] === Request start === [2025-08-23 17:57:16][354775290247849][1 ms][DEBUG] START check_scloud [2025-08-23 17:57:16][354775290247849][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:57:17][354775290247849][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 1810 11575 24327228 172524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:57:17][354775290247849][296 ms][DEBUG] targetPkg: running [2025-08-23 17:57:17][354775290247849][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 17:57:17][354775290247849][296 ms][DEBUG] START check_boot_completed [2025-08-23 17:57:17][354775290247849][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:57:17][354775290247849][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:57:17][354775290247849][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:57:17][354775290247849][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 17:57:17][354775290247849][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 17:57:17][354775290247849][374 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:57:17][354775290247849][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-08-23 17:57:17][354775290247849][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:57:17][354775290247849][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-08-23 17:57:21][354775290247849][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dceed74a-648c-44f1-a3ca-f727629c75c9","id":"QR_dceed74a-648c-44f1-a3ca-f727629c75c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:57:21][354775290247849][4873 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-23 17:57:21][354775290247849][4873 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-23 17:57:21][354775290247849][4873 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:58:04][353122992875596][0 ms][INFO] === Request start === [2025-08-23 17:58:04][353122992875596][1 ms][DEBUG] START check_scloud [2025-08-23 17:58:04][353122992875596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:58:04][353122992875596][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 1810 11575 24411864 184708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:58:04][353122992875596][288 ms][DEBUG] targetPkg: running [2025-08-23 17:58:04][353122992875596][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-23 17:58:04][353122992875596][288 ms][DEBUG] START check_boot_completed [2025-08-23 17:58:04][353122992875596][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:58:04][353122992875596][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 17:58:04][353122992875596][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:58:04][353122992875596][382 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 17:58:04][353122992875596][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 17:58:04][353122992875596][382 ms][DEBUG] START check_internet [2025-08-23 17:58:04][353122992875596][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.359/197.359/197.359/0.000 ms\n [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] check_internet: online [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] END check_internet in 328 ms [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] rawBody.length=1149 [2025-08-23 17:58:05][353122992875596][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122992875596\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5725\"}'\'' -e'"" [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:58:05][353122992875596][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122992875596\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5725\"}'\'' -e'"" [2025-08-23 17:58:11][353122992875596][6583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7f4f9e6-791f-4171-84a7-f11599352b28","id":"QR_a7f4f9e6-791f-4171-84a7-f11599352b28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:58:11][353122992875596][6739 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-08-23 17:58:11][353122992875596][6739 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-08-23 17:58:11][353122992875596][6740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 17:58:15][352600229022687][0 ms][INFO] === Request start === [2025-08-23 17:58:15][352600229022687][1 ms][DEBUG] START check_scloud [2025-08-23 17:58:15][352600229022687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 17:58:16][352600229022687][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 1810 11575 24594400 195944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 17:58:16][352600229022687][309 ms][DEBUG] targetPkg: running [2025-08-23 17:58:16][352600229022687][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 17:58:16][352600229022687][309 ms][DEBUG] START check_boot_completed [2025-08-23 17:58:16][352600229022687][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 17:58:16][352600229022687][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 17:58:16][352600229022687][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 17:58:16][352600229022687][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 17:58:16][352600229022687][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 17:58:16][352600229022687][404 ms][DEBUG] START check_internet [2025-08-23 17:58:16][352600229022687][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 17:58:16][352600229022687][699 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.879/180.879/180.879/0.000 ms\n [2025-08-23 17:58:16][352600229022687][700 ms][DEBUG] check_internet: online [2025-08-23 17:58:16][352600229022687][700 ms][DEBUG] END check_internet in 296 ms [2025-08-23 17:58:16][352600229022687][700 ms][DEBUG] rawBody.length=1148 [2025-08-23 17:58:16][352600229022687][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7014\"}'\'' -e'"" [2025-08-23 17:58:16][352600229022687][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 17:58:16][352600229022687][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7014\"}'\'' -e'"" [2025-08-23 17:58:20][352600229022687][4729 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65e0b768-9937-4e3d-b009-01b4c2df8526","id":"QR_65e0b768-9937-4e3d-b009-01b4c2df8526","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 17:58:20][352600229022687][4885 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-23 17:58:20][352600229022687][4886 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 17:58:20][352600229022687][4886 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:01:02][352879322777427][1 ms][INFO] === Request start === [2025-08-23 18:01:02][352879322777427][1 ms][DEBUG] START check_scloud [2025-08-23 18:01:02][352879322777427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:01:03][352879322777427][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 1810 11575 24724448 207400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:01:03][352879322777427][301 ms][DEBUG] targetPkg: running [2025-08-23 18:01:03][352879322777427][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 18:01:03][352879322777427][301 ms][DEBUG] START check_boot_completed [2025-08-23 18:01:03][352879322777427][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:01:03][352879322777427][346 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 18:01:03][352879322777427][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:01:03][352879322777427][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:01:03][352879322777427][392 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 18:01:03][352879322777427][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:01:03][352879322777427][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879322777427\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2575\"}'\'' -e'"" [2025-08-23 18:01:03][352879322777427][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:01:03][352879322777427][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879322777427\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2575\"}'\'' -e'"" [2025-08-23 18:01:07][352879322777427][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3933c172-66d0-473a-b80e-c40052897eba","id":"QR_3933c172-66d0-473a-b80e-c40052897eba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:01:07][352879322777427][4719 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-23 18:01:07][352879322777427][4719 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-23 18:01:07][352879322777427][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:01:10][353370806771440][0 ms][INFO] === Request start === [2025-08-23 18:01:10][353370806771440][1 ms][DEBUG] START check_scloud [2025-08-23 18:01:10][353370806771440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:01:10][353370806771440][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 1810 11575 24903784 218208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:01:10][353370806771440][295 ms][DEBUG] targetPkg: running [2025-08-23 18:01:10][353370806771440][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-23 18:01:10][353370806771440][295 ms][DEBUG] START check_boot_completed [2025-08-23 18:01:10][353370806771440][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:01:10][353370806771440][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:01:10][353370806771440][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:01:10][353370806771440][406 ms][DEBUG] SU: done in 64 ms; out [2025-08-23 18:01:10][353370806771440][406 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-23 18:01:10][353370806771440][406 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:01:10][353370806771440][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370806771440\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3967\"}'\'' -e'"" [2025-08-23 18:01:10][353370806771440][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:01:10][353370806771440][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370806771440\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3967\"}'\'' -e'"" [2025-08-23 18:01:14][353370806771440][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8690493a-af7a-471f-b473-e735bdf70030","id":"QR_8690493a-af7a-471f-b473-e735bdf70030","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:01:14][353370806771440][4496 ms][DEBUG] proc_open done in 4090 ms; code=255; res.len=3343 [2025-08-23 18:01:14][353370806771440][4496 ms][DEBUG] END runCmdUntilRes#1 in 4090 ms [2025-08-23 18:01:14][353370806771440][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:03:29][353074282314176][1 ms][INFO] === Request start === [2025-08-23 18:03:29][353074282314176][1 ms][DEBUG] START check_scloud [2025-08-23 18:03:29][353074282314176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:03:30][353074282314176][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 1810 11575 25027880 230276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:03:30][353074282314176][257 ms][DEBUG] targetPkg: running [2025-08-23 18:03:30][353074282314176][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 18:03:30][353074282314176][257 ms][DEBUG] START check_boot_completed [2025-08-23 18:03:30][353074282314176][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:03:30][353074282314176][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:03:30][353074282314176][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:03:30][353074282314176][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:03:30][353074282314176][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:03:30][353074282314176][335 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:03:30][353074282314176][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-23 18:03:30][353074282314176][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:03:30][353074282314176][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-23 18:03:34][353074282314176][4193 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 18:03:34][353074282314176][4350 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=107 [2025-08-23 18:03:34][353074282314176][4350 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 18:03:34][353074282314176][4350 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 18:03:34][][0 ms][INFO] === Request start === [2025-08-23 18:03:34][][1 ms][DEBUG] START check_scloud [2025-08-23 18:03:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:03:35][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 1810 11575 25179820 241204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:03:35][][311 ms][DEBUG] targetPkg: running [2025-08-23 18:03:35][][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 18:03:35][][311 ms][DEBUG] START check_boot_completed [2025-08-23 18:03:35][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:03:35][][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:03:35][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:03:35][][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:03:35][][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:03:35][][405 ms][DEBUG] rawBody.length=1129 [2025-08-23 18:03:35][][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT62R1VXE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-23 18:03:35][][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:03:35][][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT62R1VXE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-23 18:03:38][][4107 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 18:03:38][][4107 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-23 18:03:38][][4107 ms][WARN] Detected error: Process with pid 1810 either refused to load frida-agent, or terminated during injection [2025-08-23 18:03:38][][4107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 18:03:38][][4263 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 18:03:38][][4263 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 18:03:38][][4264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 18:03:39][][4435 ms][DEBUG] SU: done in 171 ms; out [2025-08-23 18:03:39][][4435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 18:03:39][][4591 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 18:03:41][][6606 ms][DEBUG] START check_boot_completed [2025-08-23 18:03:41][][6606 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:03:41][][6653 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:03:41][][6653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:03:41][][6700 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:03:41][][6700 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:03:44][][9715 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 18:03:44][][9715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT62R1VXE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-23 18:03:48][][13417 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 18:03:48][][13573 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-23 18:03:48][][13573 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-23 18:03:48][][13573 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 18:03:50][353074282314176][0 ms][INFO] === Request start === [2025-08-23 18:03:50][353074282314176][1 ms][DEBUG] START check_scloud [2025-08-23 18:03:50][353074282314176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:03:50][353074282314176][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 3201 11575 23782200 124924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:03:50][353074282314176][251 ms][DEBUG] targetPkg: running [2025-08-23 18:03:50][353074282314176][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-23 18:03:50][353074282314176][251 ms][DEBUG] START check_boot_completed [2025-08-23 18:03:50][353074282314176][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:03:50][353074282314176][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:03:50][353074282314176][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:03:50][353074282314176][376 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 18:03:50][353074282314176][376 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 18:03:50][353074282314176][376 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:03:50][353074282314176][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-08-23 18:03:50][353074282314176][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:03:50][353074282314176][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-08-23 18:03:55][353074282314176][5624 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8fdb087-087a-48aa-b1aa-535d0f0c914b","id":"QR_f8fdb087-087a-48aa-b1aa-535d0f0c914b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:03:56][353074282314176][5781 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-08-23 18:03:56][353074282314176][5781 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-08-23 18:03:56][353074282314176][5781 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:05:05][357556770705549][0 ms][INFO] === Request start === [2025-08-23 18:05:05][357556770705549][1 ms][DEBUG] START check_scloud [2025-08-23 18:05:05][357556770705549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:05:05][357556770705549][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 3201 11575 23867988 138156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:05:05][357556770705549][307 ms][DEBUG] targetPkg: running [2025-08-23 18:05:05][357556770705549][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 18:05:05][357556770705549][307 ms][DEBUG] START check_boot_completed [2025-08-23 18:05:05][357556770705549][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:05:05][357556770705549][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:05:05][357556770705549][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:05:06][357556770705549][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:05:06][357556770705549][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:05:06][357556770705549][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:05:06][357556770705549][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770705549\",\"model\":\"SM-T735\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-08-23 18:05:06][357556770705549][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:05:06][357556770705549][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770705549\",\"model\":\"SM-T735\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-08-23 18:05:11][357556770705549][6086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0abe40d1-7003-4fd1-8918-8bc3e1a9b458","id":"QR_0abe40d1-7003-4fd1-8918-8bc3e1a9b458","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:05:11][357556770705549][6243 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-08-23 18:05:11][357556770705549][6243 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 18:05:11][357556770705549][6243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:10:03][352682500524128][1 ms][INFO] === Request start === [2025-08-23 18:10:03][352682500524128][1 ms][DEBUG] START check_scloud [2025-08-23 18:10:03][352682500524128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:10:03][352682500524128][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 3201 11575 23990088 150480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:10:03][352682500524128][307 ms][DEBUG] targetPkg: running [2025-08-23 18:10:03][352682500524128][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 18:10:03][352682500524128][307 ms][DEBUG] START check_boot_completed [2025-08-23 18:10:03][352682500524128][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:10:03][352682500524128][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:10:03][352682500524128][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:10:03][352682500524128][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:10:03][352682500524128][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:10:03][352682500524128][386 ms][DEBUG] START check_internet [2025-08-23 18:10:03][352682500524128][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:10:05][352682500524128][2510 ms][DEBUG] SU: done in 2124 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=1842 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 1842.425/1842.425/1842.425/0.000 ms\n [2025-08-23 18:10:05][352682500524128][2510 ms][DEBUG] check_internet: online [2025-08-23 18:10:05][352682500524128][2510 ms][DEBUG] END check_internet in 2125 ms [2025-08-23 18:10:05][352682500524128][2510 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:10:05][352682500524128][2510 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500524128\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3877\"}'\'' -e'"" [2025-08-23 18:10:05][352682500524128][2510 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:10:05][352682500524128][2511 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500524128\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3877\"}'\'' -e'"" [2025-08-23 18:10:09][352682500524128][6837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4d2186a-cace-4c43-9b8d-91666f5d655e","id":"QR_f4d2186a-cace-4c43-9b8d-91666f5d655e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:10:10][352682500524128][6993 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-23 18:10:10][352682500524128][6993 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-23 18:10:10][352682500524128][6993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:12:03][354892910777335][1 ms][INFO] === Request start === [2025-08-23 18:12:03][354892910777335][1 ms][DEBUG] START check_scloud [2025-08-23 18:12:03][354892910777335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:12:03][354892910777335][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 3201 11575 24136620 161836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:12:03][354892910777335][273 ms][DEBUG] targetPkg: running [2025-08-23 18:12:03][354892910777335][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 18:12:03][354892910777335][273 ms][DEBUG] START check_boot_completed [2025-08-23 18:12:03][354892910777335][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:12:03][354892910777335][320 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:12:03][354892910777335][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:12:04][354892910777335][382 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:12:04][354892910777335][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:12:04][354892910777335][382 ms][DEBUG] START check_internet [2025-08-23 18:12:04][354892910777335][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:12:04][354892910777335][1210 ms][DEBUG] SU: done in 828 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=510 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 510.775/510.775/510.775/0.000 ms\n [2025-08-23 18:12:04][354892910777335][1210 ms][DEBUG] check_internet: online [2025-08-23 18:12:04][354892910777335][1210 ms][DEBUG] END check_internet in 828 ms [2025-08-23 18:12:04][354892910777335][1210 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:12:04][354892910777335][1211 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910777335\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4100\"}'\'' -e'"" [2025-08-23 18:12:04][354892910777335][1211 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:12:04][354892910777335][1211 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910777335\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4100\"}'\'' -e'"" [2025-08-23 18:12:09][354892910777335][5537 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f479ea6-1c4c-44a2-813d-3a0f0808e94e","id":"QR_1f479ea6-1c4c-44a2-813d-3a0f0808e94e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:12:09][354892910777335][5693 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-23 18:12:09][354892910777335][5693 ms][DEBUG] END runCmdUntilRes#1 in 4482 ms [2025-08-23 18:12:09][354892910777335][5693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:12:13][350633294627926][0 ms][INFO] === Request start === [2025-08-23 18:12:13][350633294627926][0 ms][DEBUG] START check_scloud [2025-08-23 18:12:13][350633294627926][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:12:14][350633294627926][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 3201 11575 24311796 172080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:12:14][350633294627926][278 ms][DEBUG] targetPkg: running [2025-08-23 18:12:14][350633294627926][278 ms][DEBUG] END check_scloud in 278 ms [2025-08-23 18:12:14][350633294627926][278 ms][DEBUG] START check_boot_completed [2025-08-23 18:12:14][350633294627926][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:12:14][350633294627926][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:12:14][350633294627926][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:12:14][350633294627926][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:12:14][350633294627926][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:12:14][350633294627926][372 ms][DEBUG] START check_internet [2025-08-23 18:12:14][350633294627926][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=400 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 400.291/400.291/400.291/0.000 ms\n [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] check_internet: online [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] END check_internet in 500 ms [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:12:14][350633294627926][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294627926\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:12:14][350633294627926][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294627926\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-23 18:12:22][350633294627926][8276 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_409a907b-eae0-46d5-b2ec-5d831a8f1739","id":"QR_409a907b-eae0-46d5-b2ec-5d831a8f1739","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:12:22][350633294627926][8432 ms][DEBUG] proc_open done in 7560 ms; code=255; res.len=3343 [2025-08-23 18:12:22][350633294627926][8432 ms][DEBUG] END runCmdUntilRes#1 in 7560 ms [2025-08-23 18:12:22][350633294627926][8432 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:14:03][352665184538506][0 ms][INFO] === Request start === [2025-08-23 18:14:03][352665184538506][1 ms][DEBUG] START check_scloud [2025-08-23 18:14:03][352665184538506][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:14:04][352665184538506][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 3201 11575 24413236 183996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:14:04][352665184538506][300 ms][DEBUG] targetPkg: running [2025-08-23 18:14:04][352665184538506][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 18:14:04][352665184538506][300 ms][DEBUG] START check_boot_completed [2025-08-23 18:14:04][352665184538506][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:14:04][352665184538506][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:14:04][352665184538506][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:14:04][352665184538506][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:14:04][352665184538506][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:14:04][352665184538506][393 ms][DEBUG] START check_internet [2025-08-23 18:14:04][352665184538506][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.657/285.657/285.657/0.000 ms\n [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] check_internet: online [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] END check_internet in 391 ms [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:14:04][352665184538506][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184538506\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1872\"}'\'' -e'"" [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:14:04][352665184538506][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184538506\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1872\"}'\'' -e'"" [2025-08-23 18:14:08][352665184538506][4892 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa6bf7b6-756b-424d-be86-4cc11e6cc960","id":"QR_aa6bf7b6-756b-424d-be86-4cc11e6cc960","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:14:08][352665184538506][5048 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 18:14:08][352665184538506][5048 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 18:14:08][352665184538506][5048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:14:11][352060483868418][1 ms][INFO] === Request start === [2025-08-23 18:14:11][352060483868418][1 ms][DEBUG] START check_scloud [2025-08-23 18:14:11][352060483868418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:14:11][352060483868418][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 3201 11575 24574140 194824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:14:11][352060483868418][297 ms][DEBUG] targetPkg: running [2025-08-23 18:14:11][352060483868418][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 18:14:11][352060483868418][297 ms][DEBUG] START check_boot_completed [2025-08-23 18:14:11][352060483868418][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:14:11][352060483868418][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:14:11][352060483868418][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:14:11][352060483868418][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:14:11][352060483868418][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:14:11][352060483868418][390 ms][DEBUG] START check_internet [2025-08-23 18:14:11][352060483868418][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:14:12][352060483868418][640 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.507/131.507/131.507/0.000 ms\n [2025-08-23 18:14:12][352060483868418][640 ms][DEBUG] check_internet: online [2025-08-23 18:14:12][352060483868418][641 ms][DEBUG] END check_internet in 250 ms [2025-08-23 18:14:12][352060483868418][641 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:14:12][352060483868418][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483868418\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7273\"}'\'' -e'"" [2025-08-23 18:14:12][352060483868418][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:14:12][352060483868418][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483868418\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7273\"}'\'' -e'"" [2025-08-23 18:14:15][352060483868418][4374 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e085b0f2-343e-4971-bf6d-61e7b84eae62","id":"QR_e085b0f2-343e-4971-bf6d-61e7b84eae62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:14:16][352060483868418][4530 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-23 18:14:16][352060483868418][4530 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-23 18:14:16][352060483868418][4530 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:17:03][357642291373973][1 ms][INFO] === Request start === [2025-08-23 18:17:03][357642291373973][1 ms][DEBUG] START check_scloud [2025-08-23 18:17:03][357642291373973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:17:03][357642291373973][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 3201 11575 24669436 207036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:17:03][357642291373973][276 ms][DEBUG] targetPkg: running [2025-08-23 18:17:03][357642291373973][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-23 18:17:03][357642291373973][276 ms][DEBUG] START check_boot_completed [2025-08-23 18:17:03][357642291373973][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:17:03][357642291373973][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:17:03][357642291373973][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:17:03][357642291373973][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:17:03][357642291373973][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:17:03][357642291373973][354 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:17:03][357642291373973][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642291373973\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5301\"}'\'' -e'"" [2025-08-23 18:17:03][357642291373973][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:17:03][357642291373973][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642291373973\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5301\"}'\'' -e'"" [2025-08-23 18:17:08][357642291373973][4478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ecba6d8-9d6e-4781-a332-0ba249f09b98","id":"QR_7ecba6d8-9d6e-4781-a332-0ba249f09b98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:17:08][357642291373973][4634 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 18:17:08][357642291373973][4634 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 18:17:08][357642291373973][4634 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:20:03][353684142385354][1 ms][INFO] === Request start === [2025-08-23 18:20:03][353684142385354][1 ms][DEBUG] START check_scloud [2025-08-23 18:20:03][353684142385354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:20:03][353684142385354][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 3201 11575 24816096 218044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:20:03][353684142385354][269 ms][DEBUG] targetPkg: running [2025-08-23 18:20:03][353684142385354][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 18:20:03][353684142385354][269 ms][DEBUG] START check_boot_completed [2025-08-23 18:20:03][353684142385354][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:20:03][353684142385354][300 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:20:03][353684142385354][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:20:03][353684142385354][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:20:03][353684142385354][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:20:03][353684142385354][347 ms][DEBUG] START check_internet [2025-08-23 18:20:03][353684142385354][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.119/203.119/203.119/0.000 ms\n [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] check_internet: online [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] END check_internet in 500 ms [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:20:04][353684142385354][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142385354\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1247\"}'\'' -e'"" [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:20:04][353684142385354][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142385354\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1247\"}'\'' -e'"" [2025-08-23 18:20:08][353684142385354][5143 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e79df453-08a3-4889-8849-b46ae7ae6dc1","id":"QR_e79df453-08a3-4889-8849-b46ae7ae6dc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:20:08][353684142385354][5299 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-23 18:20:08][353684142385354][5299 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-23 18:20:08][353684142385354][5299 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:21:03][354916442663026][0 ms][INFO] === Request start === [2025-08-23 18:21:03][354916442663026][1 ms][DEBUG] START check_scloud [2025-08-23 18:21:03][354916442663026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:21:03][354916442663026][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 3201 11575 24927812 229800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:21:03][354916442663026][301 ms][DEBUG] targetPkg: running [2025-08-23 18:21:03][354916442663026][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 18:21:03][354916442663026][301 ms][DEBUG] START check_boot_completed [2025-08-23 18:21:03][354916442663026][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:21:03][354916442663026][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:21:03][354916442663026][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:21:03][354916442663026][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:21:03][354916442663026][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:21:03][354916442663026][410 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:21:03][354916442663026][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5932\"}'\'' -e'"" [2025-08-23 18:21:03][354916442663026][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:21:03][354916442663026][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5932\"}'\'' -e'"" [2025-08-23 18:21:07][354916442663026][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b47b65e1-6402-42ea-b09e-cb257cfe2d0e","id":"QR_b47b65e1-6402-42ea-b09e-cb257cfe2d0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:21:08][354916442663026][4800 ms][DEBUG] proc_open done in 4390 ms; code=255; res.len=3343 [2025-08-23 18:21:08][354916442663026][4800 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-23 18:21:08][354916442663026][4800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:23:03][356663760665245][1 ms][INFO] === Request start === [2025-08-23 18:23:03][356663760665245][1 ms][DEBUG] START check_scloud [2025-08-23 18:23:03][356663760665245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:23:03][356663760665245][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 3201 11575 25072296 240684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:23:03][356663760665245][301 ms][DEBUG] targetPkg: running [2025-08-23 18:23:03][356663760665245][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 18:23:03][356663760665245][301 ms][DEBUG] START check_boot_completed [2025-08-23 18:23:03][356663760665245][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:23:03][356663760665245][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:23:03][356663760665245][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:23:03][356663760665245][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 18:23:03][356663760665245][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 18:23:03][356663760665245][396 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:23:03][356663760665245][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663760665245\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-08-23 18:23:03][356663760665245][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:23:03][356663760665245][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663760665245\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-08-23 18:23:07][356663760665245][4034 ms][DEBUG] proc_open done in 3638 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 18:23:07][356663760665245][4034 ms][DEBUG] END runCmdUntilRes#1 in 3638 ms [2025-08-23 18:23:07][356663760665245][4035 ms][WARN] Detected error: Process with pid 3201 either refused to load frida-agent, or terminated during injection [2025-08-23 18:23:07][356663760665245][4035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 18:23:07][356663760665245][4160 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 18:23:07][356663760665245][4160 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 18:23:07][356663760665245][4160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 18:23:07][356663760665245][4285 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 18:23:07][356663760665245][4285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 18:23:07][356663760665245][4441 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 18:23:09][356663760665245][6456 ms][DEBUG] START check_boot_completed [2025-08-23 18:23:09][356663760665245][6456 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:23:09][356663760665245][6503 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:23:09][356663760665245][6503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:23:09][356663760665245][6550 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:23:09][356663760665245][6550 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:23:12][356663760665245][9564 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 18:23:12][356663760665245][9565 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663760665245\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-08-23 18:23:17][356663760665245][13751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddb0ad25-6f8f-4702-9cf3-df7c29df3b09","id":"QR_ddb0ad25-6f8f-4702-9cf3-df7c29df3b09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:23:17][356663760665245][13907 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-23 18:23:17][356663760665245][13907 ms][DEBUG] END runCmdUntilRes#2 in 4343 ms [2025-08-23 18:23:17][356663760665245][13908 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:24:04][355970533744541][0 ms][INFO] === Request start === [2025-08-23 18:24:04][355970533744541][1 ms][DEBUG] START check_scloud [2025-08-23 18:24:04][355970533744541][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:24:05][355970533744541][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 5293 11575 23706132 127796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:24:05][355970533744541][291 ms][DEBUG] targetPkg: running [2025-08-23 18:24:05][355970533744541][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 18:24:05][355970533744541][291 ms][DEBUG] START check_boot_completed [2025-08-23 18:24:05][355970533744541][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:24:05][355970533744541][336 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 18:24:05][355970533744541][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:24:05][355970533744541][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:24:05][355970533744541][398 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-23 18:24:05][355970533744541][398 ms][DEBUG] START check_internet [2025-08-23 18:24:05][355970533744541][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:24:05][355970533744541][914 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.020/202.020/202.020/0.000 ms\n [2025-08-23 18:24:05][355970533744541][915 ms][DEBUG] check_internet: online [2025-08-23 18:24:05][355970533744541][915 ms][DEBUG] END check_internet in 517 ms [2025-08-23 18:24:05][355970533744541][915 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:24:05][355970533744541][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533744541\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-23 18:24:05][355970533744541][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:24:05][355970533744541][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533744541\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-23 18:24:12][355970533744541][7506 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_756febc2-53c7-4f95-a48e-8a27da23bd66","id":"QR_756febc2-53c7-4f95-a48e-8a27da23bd66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:24:12][355970533744541][7662 ms][DEBUG] proc_open done in 6747 ms; code=255; res.len=3343 [2025-08-23 18:24:12][355970533744541][7662 ms][DEBUG] END runCmdUntilRes#1 in 6747 ms [2025-08-23 18:24:12][355970533744541][7662 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:27:05][350896383621577][1 ms][INFO] === Request start === [2025-08-23 18:27:05][350896383621577][1 ms][DEBUG] START check_scloud [2025-08-23 18:27:05][350896383621577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:27:05][350896383621577][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 5293 11575 23798252 138332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:27:05][350896383621577][258 ms][DEBUG] targetPkg: running [2025-08-23 18:27:05][350896383621577][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 18:27:05][350896383621577][258 ms][DEBUG] START check_boot_completed [2025-08-23 18:27:05][350896383621577][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:27:05][350896383621577][305 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:27:05][350896383621577][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:27:05][350896383621577][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:27:05][350896383621577][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:27:05][350896383621577][352 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:27:05][350896383621577][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7311\"}'\'' -e'"" [2025-08-23 18:27:05][350896383621577][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:27:05][350896383621577][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7311\"}'\'' -e'"" [2025-08-23 18:27:09][350896383621577][4600 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 18:27:09][350896383621577][4757 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=101 [2025-08-23 18:27:09][350896383621577][4757 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 18:27:09][350896383621577][4757 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 18:27:10][][0 ms][INFO] === Request start === [2025-08-23 18:27:10][][1 ms][DEBUG] START check_scloud [2025-08-23 18:27:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:27:10][][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 5293 11575 23934644 149916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:27:10][][305 ms][DEBUG] targetPkg: running [2025-08-23 18:27:10][][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 18:27:10][][305 ms][DEBUG] START check_boot_completed [2025-08-23 18:27:10][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:27:10][][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:27:10][][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:27:10][][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:27:10][][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:27:10][][383 ms][DEBUG] rawBody.length=1130 [2025-08-23 18:27:10][][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y40C9ENA\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8648\"}'\'' -e'"" [2025-08-23 18:27:10][][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:27:10][][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y40C9ENA\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8648\"}'\'' -e'"" [2025-08-23 18:27:14][][4257 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-23 18:27:14][][4413 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=101 [2025-08-23 18:27:14][][4413 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 18:27:14][][4413 ms][INFO] SUCCESS response from frida (len=101) [2025-08-23 18:27:15][350896383621577][0 ms][INFO] === Request start === [2025-08-23 18:27:15][350896383621577][1 ms][DEBUG] START check_scloud [2025-08-23 18:27:15][350896383621577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:27:15][350896383621577][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 5293 11575 24114044 160944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:27:15][350896383621577][284 ms][DEBUG] targetPkg: running [2025-08-23 18:27:15][350896383621577][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-23 18:27:15][350896383621577][284 ms][DEBUG] START check_boot_completed [2025-08-23 18:27:15][350896383621577][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:27:15][350896383621577][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:27:15][350896383621577][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:27:15][350896383621577][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:27:15][350896383621577][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:27:15][350896383621577][377 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:27:15][350896383621577][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7190\"}'\'' -e'"" [2025-08-23 18:27:15][350896383621577][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:27:15][350896383621577][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7190\"}'\'' -e'"" [2025-08-23 18:27:19][350896383621577][4517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b4c0322-d77a-4476-b243-6d8a279c94f8","id":"QR_8b4c0322-d77a-4476-b243-6d8a279c94f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:27:20][350896383621577][4673 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 18:27:20][350896383621577][4673 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-23 18:27:20][350896383621577][4673 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:28:03][357962503152860][0 ms][INFO] === Request start === [2025-08-23 18:28:03][357962503152860][1 ms][DEBUG] START check_scloud [2025-08-23 18:28:03][357962503152860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:28:03][357962503152860][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 5293 11575 24188952 172204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:28:03][357962503152860][269 ms][DEBUG] targetPkg: running [2025-08-23 18:28:03][357962503152860][269 ms][DEBUG] END check_scloud in 269 ms [2025-08-23 18:28:03][357962503152860][269 ms][DEBUG] START check_boot_completed [2025-08-23 18:28:03][357962503152860][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:28:03][357962503152860][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:28:03][357962503152860][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:28:03][357962503152860][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:28:03][357962503152860][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:28:03][357962503152860][379 ms][DEBUG] START check_internet [2025-08-23 18:28:03][357962503152860][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:28:03][357962503152860][831 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.272/201.272/201.272/0.000 ms\n [2025-08-23 18:28:03][357962503152860][832 ms][DEBUG] check_internet: online [2025-08-23 18:28:03][357962503152860][832 ms][DEBUG] END check_internet in 453 ms [2025-08-23 18:28:03][357962503152860][832 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:28:03][357962503152860][832 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503152860\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9553\"}'\'' -e'"" [2025-08-23 18:28:03][357962503152860][832 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:28:03][357962503152860][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503152860\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9553\"}'\'' -e'"" [2025-08-23 18:28:07][357962503152860][4612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_beca1e65-0e4d-4a03-a3d3-b01bd9222bdf","id":"QR_beca1e65-0e4d-4a03-a3d3-b01bd9222bdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:28:07][357962503152860][4768 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-23 18:28:07][357962503152860][4768 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 18:28:07][357962503152860][4768 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:29:03][352501914456844][0 ms][INFO] === Request start === [2025-08-23 18:29:03][352501914456844][1 ms][DEBUG] START check_scloud [2025-08-23 18:29:03][352501914456844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:29:03][352501914456844][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 5293 11575 24335484 184016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:29:03][352501914456844][298 ms][DEBUG] targetPkg: running [2025-08-23 18:29:03][352501914456844][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 18:29:03][352501914456844][298 ms][DEBUG] START check_boot_completed [2025-08-23 18:29:03][352501914456844][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:29:03][352501914456844][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:29:03][352501914456844][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:29:03][352501914456844][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 18:29:03][352501914456844][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 18:29:03][352501914456844][393 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:29:03][352501914456844][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501914456844\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6844\"}'\'' -e'"" [2025-08-23 18:29:03][352501914456844][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:29:03][352501914456844][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501914456844\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6844\"}'\'' -e'"" [2025-08-23 18:29:07][352501914456844][4516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34b23b92-e3d4-4f7d-a135-ab174ef00b2e","id":"QR_34b23b92-e3d4-4f7d-a135-ab174ef00b2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:29:08][352501914456844][4672 ms][DEBUG] proc_open done in 4278 ms; code=255; res.len=3343 [2025-08-23 18:29:08][352501914456844][4672 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-23 18:29:08][352501914456844][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:30:05][354401160058790][1 ms][INFO] === Request start === [2025-08-23 18:30:05][354401160058790][1 ms][DEBUG] START check_scloud [2025-08-23 18:30:05][354401160058790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:30:05][354401160058790][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 5293 11575 24453472 195296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:30:05][354401160058790][300 ms][DEBUG] targetPkg: running [2025-08-23 18:30:05][354401160058790][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 18:30:05][354401160058790][300 ms][DEBUG] START check_boot_completed [2025-08-23 18:30:05][354401160058790][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:30:05][354401160058790][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:30:05][354401160058790][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:30:05][354401160058790][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:30:05][354401160058790][408 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 18:30:05][354401160058790][408 ms][DEBUG] START check_internet [2025-08-23 18:30:05][354401160058790][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:30:06][354401160058790][736 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.570/210.570/210.570/0.000 ms\n [2025-08-23 18:30:06][354401160058790][736 ms][DEBUG] check_internet: online [2025-08-23 18:30:06][354401160058790][736 ms][DEBUG] END check_internet in 328 ms [2025-08-23 18:30:06][354401160058790][736 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:30:06][354401160058790][736 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160058790\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8310\"}'\'' -e'"" [2025-08-23 18:30:06][354401160058790][737 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:30:06][354401160058790][737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160058790\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8310\"}'\'' -e'"" [2025-08-23 18:30:10][354401160058790][4985 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 18:30:10][354401160058790][5141 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=115 [2025-08-23 18:30:10][354401160058790][5141 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 18:30:10][354401160058790][5141 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 18:30:11][][0 ms][INFO] === Request start === [2025-08-23 18:30:11][][1 ms][DEBUG] START check_scloud [2025-08-23 18:30:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:30:11][][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 5293 11575 24618344 207084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:30:11][][304 ms][DEBUG] targetPkg: running [2025-08-23 18:30:11][][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 18:30:11][][305 ms][DEBUG] START check_boot_completed [2025-08-23 18:30:11][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:30:11][][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:30:11][][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:30:11][][414 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 18:30:11][][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:30:11][][414 ms][DEBUG] START check_internet [2025-08-23 18:30:11][][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:30:11][][679 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.919/136.919/136.919/0.000 ms\n [2025-08-23 18:30:11][][679 ms][DEBUG] check_internet: online [2025-08-23 18:30:11][][679 ms][DEBUG] END check_internet in 265 ms [2025-08-23 18:30:11][][679 ms][DEBUG] rawBody.length=1130 [2025-08-23 18:30:11][][679 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X906LBTT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6832\"}'\'' -e'"" [2025-08-23 18:30:11][][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:30:11][][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X906LBTT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6832\"}'\'' -e'"" [2025-08-23 18:30:17][][6693 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 18:30:17][][6849 ms][DEBUG] proc_open done in 6170 ms; code=255; res.len=115 [2025-08-23 18:30:17][][6849 ms][DEBUG] END runCmdUntilRes#1 in 6170 ms [2025-08-23 18:30:17][][6849 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 18:30:18][354401160058790][0 ms][INFO] === Request start === [2025-08-23 18:30:18][354401160058790][1 ms][DEBUG] START check_scloud [2025-08-23 18:30:18][354401160058790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:30:19][354401160058790][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 5293 11575 24766184 217816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:30:19][354401160058790][309 ms][DEBUG] targetPkg: running [2025-08-23 18:30:19][354401160058790][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 18:30:19][354401160058790][309 ms][DEBUG] START check_boot_completed [2025-08-23 18:30:19][354401160058790][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:30:19][354401160058790][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:30:19][354401160058790][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:30:19][354401160058790][449 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 18:30:19][354401160058790][449 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 18:30:19][354401160058790][449 ms][DEBUG] START check_internet [2025-08-23 18:30:19][354401160058790][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:30:19][354401160058790][824 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.906/256.906/256.906/0.000 ms\n [2025-08-23 18:30:19][354401160058790][824 ms][DEBUG] check_internet: online [2025-08-23 18:30:19][354401160058790][824 ms][DEBUG] END check_internet in 375 ms [2025-08-23 18:30:19][354401160058790][824 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:30:19][354401160058790][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160058790\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2185\"}'\'' -e'"" [2025-08-23 18:30:19][354401160058790][825 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:30:19][354401160058790][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160058790\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2185\"}'\'' -e'"" [2025-08-23 18:30:23][354401160058790][5089 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67482926-eb0e-45fa-bd6d-4edd855dfc95","id":"QR_67482926-eb0e-45fa-bd6d-4edd855dfc95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:30:24][354401160058790][5245 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-23 18:30:24][354401160058790][5245 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-23 18:30:24][354401160058790][5245 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:30:26][353310802943460][0 ms][INFO] === Request start === [2025-08-23 18:30:26][353310802943460][1 ms][DEBUG] START check_scloud [2025-08-23 18:30:26][353310802943460][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:30:26][353310802943460][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 5293 11575 24916812 229768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:30:26][353310802943460][268 ms][DEBUG] targetPkg: running [2025-08-23 18:30:26][353310802943460][268 ms][DEBUG] END check_scloud in 268 ms [2025-08-23 18:30:26][353310802943460][268 ms][DEBUG] START check_boot_completed [2025-08-23 18:30:26][353310802943460][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:30:26][353310802943460][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:30:26][353310802943460][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:30:26][353310802943460][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:30:26][353310802943460][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:30:26][353310802943460][362 ms][DEBUG] START check_internet [2025-08-23 18:30:26][353310802943460][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:30:27][353310802943460][674 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.708/191.708/191.708/0.000 ms\n [2025-08-23 18:30:27][353310802943460][675 ms][DEBUG] check_internet: online [2025-08-23 18:30:27][353310802943460][675 ms][DEBUG] END check_internet in 312 ms [2025-08-23 18:30:27][353310802943460][675 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:30:27][353310802943460][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802943460\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6592\"}'\'' -e'"" [2025-08-23 18:30:27][353310802943460][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:30:27][353310802943460][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802943460\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6592\"}'\'' -e'"" [2025-08-23 18:30:31][353310802943460][4580 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f563f573-36bc-495f-b603-3966759a7730","id":"QR_f563f573-36bc-495f-b603-3966759a7730","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:30:31][353310802943460][4736 ms][DEBUG] proc_open done in 4060 ms; code=255; res.len=3343 [2025-08-23 18:30:31][353310802943460][4736 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-23 18:30:31][353310802943460][4736 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:31:04][354291426331069][1 ms][INFO] === Request start === [2025-08-23 18:31:04][354291426331069][1 ms][DEBUG] START check_scloud [2025-08-23 18:31:04][354291426331069][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:31:04][354291426331069][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 5293 11575 25003880 241720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:31:04][354291426331069][274 ms][DEBUG] targetPkg: running [2025-08-23 18:31:04][354291426331069][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-23 18:31:04][354291426331069][274 ms][DEBUG] START check_boot_completed [2025-08-23 18:31:04][354291426331069][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:31:04][354291426331069][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:31:04][354291426331069][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:31:05][354291426331069][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:31:05][354291426331069][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:31:05][354291426331069][368 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:31:05][354291426331069][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291426331069\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7775\"}'\'' -e'"" [2025-08-23 18:31:05][354291426331069][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:31:05][354291426331069][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291426331069\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7775\"}'\'' -e'"" [2025-08-23 18:31:08][354291426331069][4132 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 18:31:08][354291426331069][4132 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-23 18:31:08][354291426331069][4132 ms][WARN] Detected error: Process with pid 5293 either refused to load frida-agent, or terminated during injection [2025-08-23 18:31:08][354291426331069][4132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 18:31:08][354291426331069][4273 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 18:31:08][354291426331069][4273 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 18:31:08][354291426331069][4273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 18:31:09][354291426331069][4429 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 18:31:09][354291426331069][4429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 18:31:09][354291426331069][4586 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 18:31:11][354291426331069][6600 ms][DEBUG] START check_boot_completed [2025-08-23 18:31:11][354291426331069][6601 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:31:11][354291426331069][6647 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:31:11][354291426331069][6647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:31:11][354291426331069][6694 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:31:11][354291426331069][6694 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:31:14][354291426331069][9709 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 18:31:14][354291426331069][9709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291426331069\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7775\"}'\'' -e'"" [2025-08-23 18:31:21][354291426331069][17098 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a05e0031-606c-492b-8ae8-bef35cbd9d38","id":"QR_a05e0031-606c-492b-8ae8-bef35cbd9d38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:31:21][354291426331069][17254 ms][DEBUG] proc_open done in 7545 ms; code=255; res.len=3343 [2025-08-23 18:31:21][354291426331069][17254 ms][DEBUG] END runCmdUntilRes#2 in 7545 ms [2025-08-23 18:31:21][354291426331069][17254 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:33:03][352665182389811][0 ms][INFO] === Request start === [2025-08-23 18:33:03][352665182389811][1 ms][DEBUG] START check_scloud [2025-08-23 18:33:03][352665182389811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:33:03][352665182389811][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 6725 11575 23682676 127300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:33:03][352665182389811][283 ms][DEBUG] targetPkg: running [2025-08-23 18:33:03][352665182389811][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-23 18:33:03][352665182389811][283 ms][DEBUG] START check_boot_completed [2025-08-23 18:33:03][352665182389811][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:33:03][352665182389811][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:33:03][352665182389811][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:33:04][352665182389811][408 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 18:33:04][352665182389811][408 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 18:33:04][352665182389811][408 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:33:04][352665182389811][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182389811\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-23 18:33:04][352665182389811][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:33:04][352665182389811][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182389811\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-23 18:33:08][352665182389811][4751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f6fba76-f522-4f0a-94b2-90e8ccbdce22","id":"QR_4f6fba76-f522-4f0a-94b2-90e8ccbdce22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:33:08][352665182389811][4907 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-23 18:33:08][352665182389811][4907 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-23 18:33:08][352665182389811][4907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:34:03][351199556452683][1 ms][INFO] === Request start === [2025-08-23 18:34:03][351199556452683][1 ms][DEBUG] START check_scloud [2025-08-23 18:34:03][351199556452683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:34:03][351199556452683][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 6725 11575 23824140 138280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:34:03][351199556452683][300 ms][DEBUG] targetPkg: running [2025-08-23 18:34:03][351199556452683][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 18:34:03][351199556452683][300 ms][DEBUG] START check_boot_completed [2025-08-23 18:34:03][351199556452683][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:34:03][351199556452683][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:34:03][351199556452683][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:34:03][351199556452683][395 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 18:34:03][351199556452683][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 18:34:03][351199556452683][396 ms][DEBUG] START check_internet [2025-08-23 18:34:03][351199556452683][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:34:04][351199556452683][909 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.314/201.314/201.314/0.000 ms\n [2025-08-23 18:34:04][351199556452683][909 ms][DEBUG] check_internet: online [2025-08-23 18:34:04][351199556452683][909 ms][DEBUG] END check_internet in 514 ms [2025-08-23 18:34:04][351199556452683][910 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:34:04][351199556452683][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199556452683\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3807\"}'\'' -e'"" [2025-08-23 18:34:04][351199556452683][910 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:34:04][351199556452683][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199556452683\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3807\"}'\'' -e'"" [2025-08-23 18:34:08][351199556452683][4908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60157cfe-1edf-46a1-8ed3-ad7cac95c041","id":"QR_60157cfe-1edf-46a1-8ed3-ad7cac95c041","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:34:08][351199556452683][5064 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 18:34:08][351199556452683][5064 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 18:34:08][351199556452683][5064 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:35:05][359147522566898][0 ms][INFO] === Request start === [2025-08-23 18:35:05][359147522566898][1 ms][DEBUG] START check_scloud [2025-08-23 18:35:05][359147522566898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:35:05][359147522566898][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 6725 11575 23970608 150072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:35:05][359147522566898][310 ms][DEBUG] targetPkg: running [2025-08-23 18:35:05][359147522566898][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 18:35:05][359147522566898][310 ms][DEBUG] START check_boot_completed [2025-08-23 18:35:05][359147522566898][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:35:05][359147522566898][355 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 18:35:05][359147522566898][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:35:05][359147522566898][418 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 18:35:05][359147522566898][418 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 18:35:05][359147522566898][418 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:35:05][359147522566898][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147522566898\",\"model\":\"SM-A236U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-08-23 18:35:05][359147522566898][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:35:05][359147522566898][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147522566898\",\"model\":\"SM-A236U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-08-23 18:35:11][359147522566898][5760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93b4d4c5-8003-4a78-a4be-ee6ebf0a6727","id":"QR_93b4d4c5-8003-4a78-a4be-ee6ebf0a6727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:35:11][359147522566898][5916 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-08-23 18:35:11][359147522566898][5916 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-08-23 18:35:11][359147522566898][5916 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:36:03][351199551980282][0 ms][INFO] === Request start === [2025-08-23 18:36:03][351199551980282][1 ms][DEBUG] START check_scloud [2025-08-23 18:36:03][351199551980282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:36:04][351199551980282][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 6725 11575 24124556 161176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:36:04][351199551980282][263 ms][DEBUG] targetPkg: running [2025-08-23 18:36:04][351199551980282][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 18:36:04][351199551980282][263 ms][DEBUG] START check_boot_completed [2025-08-23 18:36:04][351199551980282][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:36:04][351199551980282][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:36:04][351199551980282][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:36:04][351199551980282][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:36:04][351199551980282][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:36:04][351199551980282][356 ms][DEBUG] START check_internet [2025-08-23 18:36:04][351199551980282][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.952/201.952/201.952/0.000 ms\n [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] check_internet: online [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] END check_internet in 531 ms [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:36:04][351199551980282][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551980282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3989\"}'\'' -e'"" [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:36:04][351199551980282][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551980282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3989\"}'\'' -e'"" [2025-08-23 18:36:08][351199551980282][5168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da3b6c38-f796-4be6-bea3-727446bd89d7","id":"QR_da3b6c38-f796-4be6-bea3-727446bd89d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:36:09][351199551980282][5324 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 18:36:09][351199551980282][5324 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 18:36:09][351199551980282][5324 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:37:03][355744471440390][1 ms][INFO] === Request start === [2025-08-23 18:37:03][355744471440390][1 ms][DEBUG] START check_scloud [2025-08-23 18:37:03][355744471440390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:37:04][355744471440390][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 6725 11575 24249484 172064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:37:04][355744471440390][278 ms][DEBUG] targetPkg: running [2025-08-23 18:37:04][355744471440390][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 18:37:04][355744471440390][278 ms][DEBUG] START check_boot_completed [2025-08-23 18:37:04][355744471440390][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:37:04][355744471440390][325 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:37:04][355744471440390][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:37:04][355744471440390][403 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 18:37:04][355744471440390][403 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 18:37:04][355744471440390][403 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:37:04][355744471440390][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471440390\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-08-23 18:37:04][355744471440390][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:37:04][355744471440390][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471440390\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-08-23 18:37:08][355744471440390][4543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fb597ad-0934-4bd1-b840-1ebaafb8c798","id":"QR_1fb597ad-0934-4bd1-b840-1ebaafb8c798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:37:08][355744471440390][4699 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 18:37:08][355744471440390][4699 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 18:37:08][355744471440390][4699 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:37:11][352350275228206][0 ms][INFO] === Request start === [2025-08-23 18:37:11][352350275228206][1 ms][DEBUG] START check_scloud [2025-08-23 18:37:11][352350275228206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:37:11][352350275228206][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 6725 11575 24430996 183992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:37:11][352350275228206][306 ms][DEBUG] targetPkg: running [2025-08-23 18:37:11][352350275228206][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 18:37:11][352350275228206][306 ms][DEBUG] START check_boot_completed [2025-08-23 18:37:11][352350275228206][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:37:11][352350275228206][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:37:11][352350275228206][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:37:11][352350275228206][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:37:11][352350275228206][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 18:37:11][352350275228206][400 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:37:11][352350275228206][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228206\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6458\"}'\'' -e'"" [2025-08-23 18:37:11][352350275228206][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:37:11][352350275228206][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228206\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6458\"}'\'' -e'"" [2025-08-23 18:37:15][352350275228206][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0cc018b-d82d-4249-8bcc-08509f2191a7","id":"QR_f0cc018b-d82d-4249-8bcc-08509f2191a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:37:15][352350275228206][4711 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-23 18:37:15][352350275228206][4711 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 18:37:15][352350275228206][4711 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:39:03][352600224132671][0 ms][INFO] === Request start === [2025-08-23 18:39:03][352600224132671][1 ms][DEBUG] START check_scloud [2025-08-23 18:39:03][352600224132671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:39:04][352600224132671][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 6725 11575 24522324 195456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:39:04][352600224132671][313 ms][DEBUG] targetPkg: running [2025-08-23 18:39:04][352600224132671][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 18:39:04][352600224132671][313 ms][DEBUG] START check_boot_completed [2025-08-23 18:39:04][352600224132671][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:39:04][352600224132671][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:39:04][352600224132671][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:39:04][352600224132671][422 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 18:39:04][352600224132671][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:39:04][352600224132671][422 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:39:04][352600224132671][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224132671\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9485\"}'\'' -e'"" [2025-08-23 18:39:04][352600224132671][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:39:04][352600224132671][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224132671\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9485\"}'\'' -e'"" [2025-08-23 18:39:08][352600224132671][4811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7d797a8-9c15-403d-918b-30c7bba6474c","id":"QR_f7d797a8-9c15-403d-918b-30c7bba6474c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:39:08][352600224132671][4968 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-23 18:39:08][352600224132671][4968 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-23 18:39:08][352600224132671][4968 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:41:05][357651715404546][1 ms][INFO] === Request start === [2025-08-23 18:41:05][357651715404546][1 ms][DEBUG] START check_scloud [2025-08-23 18:41:05][357651715404546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:41:05][357651715404546][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 6725 11575 24685368 207660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:41:05][357651715404546][304 ms][DEBUG] targetPkg: running [2025-08-23 18:41:05][357651715404546][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 18:41:05][357651715404546][304 ms][DEBUG] START check_boot_completed [2025-08-23 18:41:05][357651715404546][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:41:05][357651715404546][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:41:05][357651715404546][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:41:05][357651715404546][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:41:05][357651715404546][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:41:05][357651715404546][397 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:41:05][357651715404546][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715404546\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-23 18:41:05][357651715404546][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:41:05][357651715404546][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715404546\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-23 18:41:10][357651715404546][5849 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a36dca0e-544b-4426-b278-5f2b2a5bee87","id":"QR_a36dca0e-544b-4426-b278-5f2b2a5bee87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:41:11][357651715404546][6005 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-23 18:41:11][357651715404546][6005 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-23 18:41:11][357651715404546][6005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:42:04][358385397377907][0 ms][INFO] === Request start === [2025-08-23 18:42:04][358385397377907][1 ms][DEBUG] START check_scloud [2025-08-23 18:42:04][358385397377907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:42:04][358385397377907][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 6725 11575 24840220 218604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:42:04][358385397377907][300 ms][DEBUG] targetPkg: running [2025-08-23 18:42:04][358385397377907][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 18:42:04][358385397377907][301 ms][DEBUG] START check_boot_completed [2025-08-23 18:42:04][358385397377907][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:42:04][358385397377907][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:42:04][358385397377907][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:42:04][358385397377907][441 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 18:42:04][358385397377907][441 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 18:42:04][358385397377907][441 ms][DEBUG] START check_internet [2025-08-23 18:42:04][358385397377907][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.962/199.962/199.962/0.000 ms\n [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] check_internet: online [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] END check_internet in 500 ms [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:42:05][358385397377907][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385397377907\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7125\"}'\'' -e'"" [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:42:05][358385397377907][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385397377907\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7125\"}'\'' -e'"" [2025-08-23 18:42:09][358385397377907][5471 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_943b4785-ee0b-4b77-91a7-f681a29f4157","id":"QR_943b4785-ee0b-4b77-91a7-f681a29f4157","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:42:09][358385397377907][5627 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-23 18:42:09][358385397377907][5627 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-23 18:42:09][358385397377907][5627 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:42:13][350616258763191][0 ms][INFO] === Request start === [2025-08-23 18:42:13][350616258763191][1 ms][DEBUG] START check_scloud [2025-08-23 18:42:13][350616258763191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:42:13][350616258763191][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 6725 11575 25009444 230468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:42:13][350616258763191][255 ms][DEBUG] targetPkg: running [2025-08-23 18:42:13][350616258763191][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 18:42:13][350616258763191][255 ms][DEBUG] START check_boot_completed [2025-08-23 18:42:13][350616258763191][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:42:13][350616258763191][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:42:13][350616258763191][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:42:13][350616258763191][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:42:13][350616258763191][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:42:13][350616258763191][349 ms][DEBUG] START check_internet [2025-08-23 18:42:13][350616258763191][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:42:14][350616258763191][692 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.740/243.740/243.740/0.000 ms\n [2025-08-23 18:42:14][350616258763191][692 ms][DEBUG] check_internet: online [2025-08-23 18:42:14][350616258763191][693 ms][DEBUG] END check_internet in 344 ms [2025-08-23 18:42:14][350616258763191][693 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:42:14][350616258763191][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616258763191\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9481\"}'\'' -e'"" [2025-08-23 18:42:14][350616258763191][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:42:14][350616258763191][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616258763191\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9481\"}'\'' -e'"" [2025-08-23 18:42:21][350616258763191][7644 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4d7af94-08a9-45a8-8aaa-24a919d9aa58","id":"QR_f4d7af94-08a9-45a8-8aaa-24a919d9aa58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:42:21][350616258763191][7800 ms][DEBUG] proc_open done in 7107 ms; code=255; res.len=3343 [2025-08-23 18:42:21][350616258763191][7800 ms][DEBUG] END runCmdUntilRes#1 in 7107 ms [2025-08-23 18:42:21][350616258763191][7800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:42:27][350545467325817][1 ms][INFO] === Request start === [2025-08-23 18:42:27][350545467325817][1 ms][DEBUG] START check_scloud [2025-08-23 18:42:27][350545467325817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:42:28][350545467325817][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 6725 11575 25143816 241404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:42:28][350545467325817][278 ms][DEBUG] targetPkg: running [2025-08-23 18:42:28][350545467325817][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 18:42:28][350545467325817][278 ms][DEBUG] START check_boot_completed [2025-08-23 18:42:28][350545467325817][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:42:28][350545467325817][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:42:28][350545467325817][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:42:28][350545467325817][387 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:42:28][350545467325817][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:42:28][350545467325817][387 ms][DEBUG] START check_internet [2025-08-23 18:42:28][350545467325817][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.390/233.390/233.390/0.000 ms\n [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] check_internet: online [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] END check_internet in 344 ms [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] rawBody.length=1158 [2025-08-23 18:42:28][350545467325817][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545467325817\",\"model\":\"SM-T510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MB163EAX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8909\"}'\'' -e'"" [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:42:28][350545467325817][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545467325817\",\"model\":\"SM-T510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MB163EAX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8909\"}'\'' -e'"" [2025-08-23 18:42:32][350545467325817][4542 ms][DEBUG] proc_open done in 3811 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 18:42:32][350545467325817][4542 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 18:42:32][350545467325817][4542 ms][WARN] Detected error: Process with pid 6725 either refused to load frida-agent, or terminated during injection [2025-08-23 18:42:32][350545467325817][4542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 18:42:32][350545467325817][4683 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 18:42:32][350545467325817][4683 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 18:42:32][350545467325817][4683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 18:42:32][350545467325817][4824 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 18:42:32][350545467325817][4824 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 18:42:32][350545467325817][4964 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 18:42:34][350545467325817][6979 ms][DEBUG] START check_boot_completed [2025-08-23 18:42:34][350545467325817][6979 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:42:34][350545467325817][7026 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:42:34][350545467325817][7026 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:42:34][350545467325817][7074 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 18:42:34][350545467325817][7075 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 18:42:37][350545467325817][10088 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 18:42:37][350545467325817][10088 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545467325817\",\"model\":\"SM-T510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MB163EAX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8909\"}'\'' -e'"" [2025-08-23 18:42:41][350545467325817][13884 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1147c42-26ca-438e-a872-322c201e1c4a","id":"QR_f1147c42-26ca-438e-a872-322c201e1c4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:42:41][350545467325817][14040 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-23 18:42:41][350545467325817][14040 ms][DEBUG] END runCmdUntilRes#2 in 3952 ms [2025-08-23 18:42:41][350545467325817][14040 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:44:03][357962507108587][1 ms][INFO] === Request start === [2025-08-23 18:44:03][357962507108587][1 ms][DEBUG] START check_scloud [2025-08-23 18:44:03][357962507108587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:44:03][357962507108587][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8024 11575 23706644 127104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:44:03][357962507108587][310 ms][DEBUG] targetPkg: running [2025-08-23 18:44:03][357962507108587][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 18:44:03][357962507108587][310 ms][DEBUG] START check_boot_completed [2025-08-23 18:44:03][357962507108587][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:44:03][357962507108587][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:44:03][357962507108587][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:44:03][357962507108587][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:44:03][357962507108587][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:44:03][357962507108587][403 ms][DEBUG] START check_internet [2025-08-23 18:44:03][357962507108587][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:44:04][357962507108587][809 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=307 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 307.293/307.293/307.293/0.000 ms\n [2025-08-23 18:44:04][357962507108587][809 ms][DEBUG] check_internet: online [2025-08-23 18:44:04][357962507108587][810 ms][DEBUG] END check_internet in 406 ms [2025-08-23 18:44:04][357962507108587][810 ms][DEBUG] rawBody.length=1148 [2025-08-23 18:44:04][357962507108587][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507108587\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8687\"}'\'' -e'"" [2025-08-23 18:44:04][357962507108587][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:44:04][357962507108587][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507108587\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8687\"}'\'' -e'"" [2025-08-23 18:44:08][357962507108587][5105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45b520be-728c-4691-9c41-270bbb799a91","id":"QR_45b520be-728c-4691-9c41-270bbb799a91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:44:08][357962507108587][5261 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-23 18:44:08][357962507108587][5261 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-23 18:44:08][357962507108587][5261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:47:04][351652533835701][1 ms][INFO] === Request start === [2025-08-23 18:47:04][351652533835701][1 ms][DEBUG] START check_scloud [2025-08-23 18:47:04][351652533835701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:47:04][351652533835701][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 8024 11575 23843820 138264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:47:04][351652533835701][290 ms][DEBUG] targetPkg: running [2025-08-23 18:47:04][351652533835701][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 18:47:04][351652533835701][290 ms][DEBUG] START check_boot_completed [2025-08-23 18:47:04][351652533835701][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:47:04][351652533835701][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 18:47:04][351652533835701][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:47:04][351652533835701][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:47:04][351652533835701][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 18:47:04][351652533835701][368 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:47:04][351652533835701][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652533835701\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5344\"}'\'' -e'"" [2025-08-23 18:47:04][351652533835701][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:47:04][351652533835701][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652533835701\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5344\"}'\'' -e'"" [2025-08-23 18:47:10][351652533835701][5913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf407a48-42f2-4b10-9e4a-88fad96d863f","id":"QR_bf407a48-42f2-4b10-9e4a-88fad96d863f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:47:10][351652533835701][6070 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-08-23 18:47:10][351652533835701][6070 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-23 18:47:10][351652533835701][6070 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:52:04][355901956315154][1 ms][INFO] === Request start === [2025-08-23 18:52:04][355901956315154][1 ms][DEBUG] START check_scloud [2025-08-23 18:52:04][355901956315154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:52:05][355901956315154][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 8024 11575 24010384 150708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:52:05][355901956315154][328 ms][DEBUG] targetPkg: running [2025-08-23 18:52:05][355901956315154][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-23 18:52:05][355901956315154][328 ms][DEBUG] START check_boot_completed [2025-08-23 18:52:05][355901956315154][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:52:05][355901956315154][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:52:05][355901956315154][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:52:05][355901956315154][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:52:05][355901956315154][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:52:05][355901956315154][437 ms][DEBUG] START check_internet [2025-08-23 18:52:05][355901956315154][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 18:52:05][355901956315154][1046 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.553/201.553/201.553/0.000 ms\n [2025-08-23 18:52:05][355901956315154][1046 ms][DEBUG] check_internet: online [2025-08-23 18:52:05][355901956315154][1047 ms][DEBUG] END check_internet in 609 ms [2025-08-23 18:52:05][355901956315154][1047 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:52:05][355901956315154][1047 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901956315154\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5986\"}'\'' -e'"" [2025-08-23 18:52:05][355901956315154][1047 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:52:05][355901956315154][1047 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901956315154\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5986\"}'\'' -e'"" [2025-08-23 18:52:12][355901956315154][7232 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e8b8da3-b5c5-4c60-856c-7d1f66d3bd0a","id":"QR_5e8b8da3-b5c5-4c60-856c-7d1f66d3bd0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:52:12][355901956315154][7389 ms][DEBUG] proc_open done in 6341 ms; code=255; res.len=3343 [2025-08-23 18:52:12][355901956315154][7389 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-08-23 18:52:12][355901956315154][7389 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:55:05][350481567306103][1 ms][INFO] === Request start === [2025-08-23 18:55:05][350481567306103][1 ms][DEBUG] START check_scloud [2025-08-23 18:55:05][350481567306103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:55:05][350481567306103][327 ms][DEBUG] SU: done in 325 ms; outu0_a118 8024 11575 24134452 156364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:55:05][350481567306103][327 ms][DEBUG] targetPkg: running [2025-08-23 18:55:05][350481567306103][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-23 18:55:05][350481567306103][327 ms][DEBUG] START check_boot_completed [2025-08-23 18:55:05][350481567306103][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:55:05][350481567306103][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 18:55:05][350481567306103][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:55:06][350481567306103][420 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 18:55:06][350481567306103][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 18:55:06][350481567306103][420 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:55:06][350481567306103][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481567306103\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-08-23 18:55:06][350481567306103][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:55:06][350481567306103][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481567306103\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-08-23 18:55:13][350481567306103][7622 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d51cfc50-f53a-4aaf-b764-627490af3d29","id":"QR_d51cfc50-f53a-4aaf-b764-627490af3d29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:55:13][350481567306103][7778 ms][DEBUG] proc_open done in 7357 ms; code=255; res.len=3343 [2025-08-23 18:55:13][350481567306103][7778 ms][DEBUG] END runCmdUntilRes#1 in 7358 ms [2025-08-23 18:55:13][350481567306103][7778 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 18:57:05][355296341186976][0 ms][INFO] === Request start === [2025-08-23 18:57:05][355296341186976][1 ms][DEBUG] START check_scloud [2025-08-23 18:57:05][355296341186976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 18:57:05][355296341186976][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 8024 11575 24287256 167216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 18:57:05][355296341186976][290 ms][DEBUG] targetPkg: running [2025-08-23 18:57:05][355296341186976][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 18:57:05][355296341186976][290 ms][DEBUG] START check_boot_completed [2025-08-23 18:57:05][355296341186976][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 18:57:05][355296341186976][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 18:57:05][355296341186976][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 18:57:05][355296341186976][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 18:57:05][355296341186976][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 18:57:05][355296341186976][399 ms][DEBUG] rawBody.length=1149 [2025-08-23 18:57:05][355296341186976][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7057\"}'\'' -e'"" [2025-08-23 18:57:05][355296341186976][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 18:57:05][355296341186976][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7057\"}'\'' -e'"" [2025-08-23 18:57:14][355296341186976][8834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac0767b8-1ba1-4b04-b528-b294b3926294","id":"QR_ac0767b8-1ba1-4b04-b528-b294b3926294","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 18:57:14][355296341186976][8990 ms][DEBUG] proc_open done in 8591 ms; code=255; res.len=3343 [2025-08-23 18:57:14][355296341186976][8990 ms][DEBUG] END runCmdUntilRes#1 in 8591 ms [2025-08-23 18:57:14][355296341186976][8991 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:00:30][351521288400633][1 ms][INFO] === Request start === [2025-08-23 19:00:30][351521288400633][1 ms][DEBUG] START check_scloud [2025-08-23 19:00:30][351521288400633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:00:30][351521288400633][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 8024 11575 24441724 150040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:00:30][351521288400633][268 ms][DEBUG] targetPkg: running [2025-08-23 19:00:30][351521288400633][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 19:00:30][351521288400633][268 ms][DEBUG] START check_boot_completed [2025-08-23 19:00:30][351521288400633][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:00:30][351521288400633][300 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:00:30][351521288400633][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:00:30][351521288400633][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:00:30][351521288400633][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:00:30][351521288400633][347 ms][DEBUG] START check_internet [2025-08-23 19:00:30][351521288400633][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.708/199.708/199.708/0.000 ms\n [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] check_internet: online [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] END check_internet in 453 ms [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:00:31][351521288400633][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1210\"}'\'' -e'"" [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:00:31][351521288400633][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1210\"}'\'' -e'"" [2025-08-23 19:00:40][351521288400633][9860 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:00:40][351521288400633][10016 ms][DEBUG] proc_open done in 9216 ms; code=255; res.len=107 [2025-08-23 19:00:40][351521288400633][10016 ms][DEBUG] END runCmdUntilRes#1 in 9216 ms [2025-08-23 19:00:40][351521288400633][10016 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:00:40][][0 ms][INFO] === Request start === [2025-08-23 19:00:40][][1 ms][DEBUG] START check_scloud [2025-08-23 19:00:40][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:00:41][][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 8024 11575 24598660 155056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:00:41][][265 ms][DEBUG] targetPkg: running [2025-08-23 19:00:41][][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-23 19:00:41][][265 ms][DEBUG] START check_boot_completed [2025-08-23 19:00:41][][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:00:41][][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:00:41][][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:00:41][][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:00:41][][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:00:41][][358 ms][DEBUG] START check_internet [2025-08-23 19:00:41][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:00:41][][608 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.984/142.984/142.984/0.000 ms\n [2025-08-23 19:00:41][][609 ms][DEBUG] check_internet: online [2025-08-23 19:00:41][][609 ms][DEBUG] END check_internet in 250 ms [2025-08-23 19:00:41][][609 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:00:41][][609 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW706GYCT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3354\"}'\'' -e'"" [2025-08-23 19:00:41][][609 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:00:41][][609 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW706GYCT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3354\"}'\'' -e'"" [2025-08-23 19:00:45][][4170 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:00:45][][4326 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=107 [2025-08-23 19:00:45][][4326 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-23 19:00:45][][4326 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:00:47][351521288400633][0 ms][INFO] === Request start === [2025-08-23 19:00:47][351521288400633][1 ms][DEBUG] START check_scloud [2025-08-23 19:00:47][351521288400633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:00:47][351521288400633][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8024 11575 24741260 166796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:00:47][351521288400633][312 ms][DEBUG] targetPkg: running [2025-08-23 19:00:47][351521288400633][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 19:00:47][351521288400633][312 ms][DEBUG] START check_boot_completed [2025-08-23 19:00:47][351521288400633][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:00:47][351521288400633][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:00:47][351521288400633][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:00:47][351521288400633][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:00:47][351521288400633][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:00:47][351521288400633][405 ms][DEBUG] START check_internet [2025-08-23 19:00:47][351521288400633][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.116/195.116/195.116/0.000 ms\n [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] check_internet: online [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] END check_internet in 422 ms [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:00:47][351521288400633][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4311\"}'\'' -e'"" [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:00:47][351521288400633][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4311\"}'\'' -e'"" [2025-08-23 19:00:53][351521288400633][6185 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7497cb15-3272-40db-92c5-d5d5ab15a482","id":"QR_7497cb15-3272-40db-92c5-d5d5ab15a482","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:00:53][351521288400633][6341 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 19:00:53][351521288400633][6341 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 19:00:53][351521288400633][6341 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:03:04][353899610520890][1 ms][INFO] === Request start === [2025-08-23 19:03:04][353899610520890][1 ms][DEBUG] START check_scloud [2025-08-23 19:03:04][353899610520890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:03:04][353899610520890][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 8024 11575 24865320 176012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:03:04][353899610520890][315 ms][DEBUG] targetPkg: running [2025-08-23 19:03:04][353899610520890][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 19:03:04][353899610520890][315 ms][DEBUG] START check_boot_completed [2025-08-23 19:03:04][353899610520890][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:03:04][353899610520890][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:03:04][353899610520890][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:03:04][353899610520890][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:03:04][353899610520890][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:03:04][353899610520890][393 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:03:04][353899610520890][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353899610520890\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8354\"}'\'' -e'"" [2025-08-23 19:03:04][353899610520890][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:03:04][353899610520890][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353899610520890\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8354\"}'\'' -e'"" [2025-08-23 19:03:09][353899610520890][5532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1238ad49-56c0-49a7-be4b-62b91e67eab8","id":"QR_1238ad49-56c0-49a7-be4b-62b91e67eab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:03:09][353899610520890][5689 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-23 19:03:09][353899610520890][5689 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-23 19:03:09][353899610520890][5689 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:10:31][356697215647879][1 ms][INFO] === Request start === [2025-08-23 19:10:31][356697215647879][1 ms][DEBUG] START check_scloud [2025-08-23 19:10:31][356697215647879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:10:32][356697215647879][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8024 11575 24979136 187116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:10:32][356697215647879][309 ms][DEBUG] targetPkg: running [2025-08-23 19:10:32][356697215647879][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 19:10:32][356697215647879][309 ms][DEBUG] START check_boot_completed [2025-08-23 19:10:32][356697215647879][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:10:32][356697215647879][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:10:32][356697215647879][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:10:32][356697215647879][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:10:32][356697215647879][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:10:32][356697215647879][418 ms][DEBUG] START check_internet [2025-08-23 19:10:32][356697215647879][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.601/202.601/202.601/0.000 ms\n [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] check_internet: online [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] END check_internet in 515 ms [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:10:32][356697215647879][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697215647879\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4397\"}'\'' -e'"" [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:10:32][356697215647879][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697215647879\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4397\"}'\'' -e'"" [2025-08-23 19:10:37][356697215647879][6104 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37872377-4b48-4eb6-9974-fd7abf8d2a42","id":"QR_37872377-4b48-4eb6-9974-fd7abf8d2a42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:10:38][356697215647879][6261 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-23 19:10:38][356697215647879][6261 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-23 19:10:38][356697215647879][6261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:12:05][352971688347661][0 ms][INFO] === Request start === [2025-08-23 19:12:05][352971688347661][1 ms][DEBUG] START check_scloud [2025-08-23 19:12:05][352971688347661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:12:05][352971688347661][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 8024 11575 25139184 197268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:12:05][352971688347661][322 ms][DEBUG] targetPkg: running [2025-08-23 19:12:05][352971688347661][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 19:12:05][352971688347661][322 ms][DEBUG] START check_boot_completed [2025-08-23 19:12:05][352971688347661][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:12:05][352971688347661][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:12:05][352971688347661][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:12:05][352971688347661][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:12:05][352971688347661][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:12:05][352971688347661][415 ms][DEBUG] START check_internet [2025-08-23 19:12:05][352971688347661][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:12:06][352971688347661][899 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.796/202.796/202.796/0.000 ms\n [2025-08-23 19:12:06][352971688347661][900 ms][DEBUG] check_internet: online [2025-08-23 19:12:06][352971688347661][900 ms][DEBUG] END check_internet in 484 ms [2025-08-23 19:12:06][352971688347661][900 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:12:06][352971688347661][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7785\"}'\'' -e'"" [2025-08-23 19:12:06][352971688347661][900 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:12:06][352971688347661][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7785\"}'\'' -e'"" [2025-08-23 19:12:15][352971688347661][9632 ms][DEBUG] proc_open done in 8732 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 19:12:15][352971688347661][9632 ms][DEBUG] END runCmdUntilRes#1 in 8732 ms [2025-08-23 19:12:15][352971688347661][9632 ms][WARN] Detected error: Process with pid 8024 either refused to load frida-agent, or terminated during injection [2025-08-23 19:12:15][352971688347661][9632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:12:15][352971688347661][9819 ms][DEBUG] SU: done in 187 ms; out [2025-08-23 19:12:15][352971688347661][9819 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:12:15][352971688347661][9819 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:12:15][352971688347661][10116 ms][DEBUG] SU: done in 296 ms; out [2025-08-23 19:12:15][352971688347661][10116 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:12:15][352971688347661][10383 ms][DEBUG] SU: done in 267 ms; out [2025-08-23 19:12:17][352971688347661][12397 ms][DEBUG] START check_boot_completed [2025-08-23 19:12:17][352971688347661][12397 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:12:17][352971688347661][12444 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:12:17][352971688347661][12444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:12:17][352971688347661][12522 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:12:17][352971688347661][12522 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:12:21][352971688347661][15536 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:12:21][352971688347661][15536 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7785\"}'\'' -e'"" [2025-08-23 19:12:22][352971688347661][17099 ms][DEBUG] proc_open done in 1562 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 19:12:22][352971688347661][17099 ms][DEBUG] END runCmdUntilRes#2 in 1563 ms [2025-08-23 19:12:22][352971688347661][17099 ms][WARN] Detected error 2; Reboot the device [2025-08-23 19:12:22][352971688347661][17099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 19:12:23][352971688347661][17708 ms][DEBUG] SU: done in 609 ms; out [2025-08-23 19:13:04][352971688347661][1 ms][INFO] === Request start === [2025-08-23 19:13:04][352971688347661][1 ms][DEBUG] START check_scloud [2025-08-23 19:13:04][352971688347661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:13:04][352971688347661][29 ms][DEBUG] SU: done in 28 ms; out [2025-08-23 19:13:04][352971688347661][29 ms][WARN] targetPkg: not running, restarting [2025-08-23 19:13:04][352971688347661][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:13:04][352971688347661][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 19:13:04][352971688347661][61 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:13:04][352971688347661][107 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:13:06][352971688347661][2122 ms][DEBUG] END check_scloud in 2121 ms [2025-08-23 19:13:06][352971688347661][2122 ms][DEBUG] START check_boot_completed [2025-08-23 19:13:06][352971688347661][2123 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:13:23][352971688347661][18409 ms][DEBUG] ADB: done in 16287 ms; out [2025-08-23 19:13:23][352971688347661][18409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:13:23][352971688347661][18488 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:13:23][352971688347661][18488 ms][DEBUG] END check_boot_completed in 16365 ms [2025-08-23 19:13:23][352971688347661][18488 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:13:23][352971688347661][18488 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8111\"}'\'' -e'"" [2025-08-23 19:13:23][352971688347661][18488 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:13:23][352971688347661][18488 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8111\"}'\'' -e'"" [2025-08-23 19:13:26][352971688347661][21659 ms][DEBUG] proc_open done in 3171 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 19:13:26][352971688347661][21659 ms][DEBUG] END runCmdUntilRes#1 in 3171 ms [2025-08-23 19:13:26][352971688347661][21659 ms][WARN] Detected error: Process not found [2025-08-23 19:13:26][352971688347661][21659 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:13:26][352971688347661][21846 ms][DEBUG] SU: done in 188 ms; out [2025-08-23 19:13:26][352971688347661][21846 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:13:26][352971688347661][21846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:13:26][352971688347661][22002 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 19:13:26][352971688347661][22002 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:13:27][352971688347661][22252 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:13:29][352971688347661][24267 ms][DEBUG] START check_boot_completed [2025-08-23 19:13:29][352971688347661][24267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:13:30][352971688347661][25316 ms][DEBUG] ADB: done in 1049 ms; out [2025-08-23 19:13:30][352971688347661][25316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:13:30][352971688347661][25363 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:13:30][352971688347661][25363 ms][DEBUG] END check_boot_completed in 1096 ms [2025-08-23 19:13:33][352971688347661][28378 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:13:33][352971688347661][28378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8111\"}'\'' -e'"" [2025-08-23 19:13:39][352971688347661][34330 ms][DEBUG] proc_open done in 5951 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-23 19:13:39][352971688347661][34330 ms][DEBUG] END runCmdUntilRes#2 in 5952 ms [2025-08-23 19:13:39][352971688347661][34330 ms][WARN] Detected error 2; Reboot the device [2025-08-23 19:13:39][352971688347661][34330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 19:13:43][352971688347661][38563 ms][DEBUG] SU: done in 4233 ms; out [2025-08-23 19:14:05][352971688347661][0 ms][INFO] === Request start === [2025-08-23 19:14:05][352971688347661][1 ms][DEBUG] START check_scloud [2025-08-23 19:14:05][352971688347661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:14:05][352971688347661][36 ms][DEBUG] SU: done in 35 ms; out [2025-08-23 19:14:05][352971688347661][36 ms][WARN] targetPkg: not running, restarting [2025-08-23 19:14:05][352971688347661][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:14:05][352971688347661][67 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 19:14:05][352971688347661][67 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:14:05][352971688347661][99 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 19:14:07][352971688347661][2114 ms][DEBUG] END check_scloud in 2113 ms [2025-08-23 19:14:07][352971688347661][2114 ms][DEBUG] START check_boot_completed [2025-08-23 19:14:07][352971688347661][2114 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:14:40][352971688347661][35655 ms][DEBUG] ADB: done in 33541 ms; out [2025-08-23 19:14:40][352971688347661][35655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:14:40][352971688347661][35718 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:14:40][352971688347661][35718 ms][DEBUG] END check_boot_completed in 33604 ms [2025-08-23 19:14:40][352971688347661][35718 ms][DEBUG] START check_internet [2025-08-23 19:14:40][352971688347661][35718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:14:41][352971688347661][35827 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 19:14:41][352971688347661][35827 ms][WARN] check_internet: offline [2025-08-23 19:14:41][352971688347661][35827 ms][DEBUG] END check_internet in 110 ms [2025-08-23 19:15:04][352971688347661][0 ms][INFO] === Request start === [2025-08-23 19:15:04][352971688347661][1 ms][DEBUG] START check_scloud [2025-08-23 19:15:04][352971688347661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:15:05][352971688347661][416 ms][DEBUG] SU: done in 416 ms; out [2025-08-23 19:15:05][352971688347661][417 ms][WARN] targetPkg: not running, restarting [2025-08-23 19:15:05][352971688347661][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:15:05][352971688347661][573 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 19:15:05][352971688347661][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:15:05][352971688347661][791 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:15:07][352971688347661][2806 ms][DEBUG] END check_scloud in 2806 ms [2025-08-23 19:15:07][352971688347661][2806 ms][DEBUG] START check_boot_completed [2025-08-23 19:15:07][352971688347661][2806 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:15:07][352971688347661][2853 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:15:07][352971688347661][2853 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:15:07][352971688347661][2931 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:15:07][352971688347661][2931 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:15:07][352971688347661][2931 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:15:07][352971688347661][2931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3895\"}'\'' -e'"" [2025-08-23 19:15:07][352971688347661][2931 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:15:07][352971688347661][2931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971688347661\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3895\"}'\'' -e'"" [2025-08-23 19:15:15][352971688347661][10351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2753f0d1-abef-4974-8773-2c406ea35921","id":"QR_2753f0d1-abef-4974-8773-2c406ea35921","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:15:15][352971688347661][10508 ms][DEBUG] proc_open done in 7576 ms; code=255; res.len=3343 [2025-08-23 19:15:15][352971688347661][10508 ms][DEBUG] END runCmdUntilRes#1 in 7576 ms [2025-08-23 19:15:15][352971688347661][10508 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:15:21][353684123481370][1 ms][INFO] === Request start === [2025-08-23 19:15:21][353684123481370][1 ms][DEBUG] START check_scloud [2025-08-23 19:15:21][353684123481370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:15:21][353684123481370][351 ms][DEBUG] SU: done in 350 ms; outu0_a118 10195 4970 23819932 109364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:15:21][353684123481370][351 ms][DEBUG] targetPkg: running [2025-08-23 19:15:21][353684123481370][351 ms][DEBUG] END check_scloud in 350 ms [2025-08-23 19:15:21][353684123481370][351 ms][DEBUG] START check_boot_completed [2025-08-23 19:15:21][353684123481370][351 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:15:21][353684123481370][398 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:15:21][353684123481370][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:15:21][353684123481370][476 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:15:21][353684123481370][476 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:15:21][353684123481370][476 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:15:21][353684123481370][476 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123481370\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8000\"}'\'' -e'"" [2025-08-23 19:15:21][353684123481370][476 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:15:21][353684123481370][476 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123481370\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8000\"}'\'' -e'"" [2025-08-23 19:15:27][353684123481370][5787 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd38e618-f9db-4b3c-ba4f-cf9699101ded","id":"QR_dd38e618-f9db-4b3c-ba4f-cf9699101ded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:15:27][353684123481370][5943 ms][DEBUG] proc_open done in 5466 ms; code=255; res.len=3343 [2025-08-23 19:15:27][353684123481370][5943 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-23 19:15:27][353684123481370][5943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:16:03][358697430862731][0 ms][INFO] === Request start === [2025-08-23 19:16:03][358697430862731][1 ms][DEBUG] START check_scloud [2025-08-23 19:16:03][358697430862731][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:16:03][358697430862731][346 ms][DEBUG] SU: done in 346 ms; outu0_a118 10195 4970 23923092 60084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:16:03][358697430862731][347 ms][DEBUG] targetPkg: running [2025-08-23 19:16:03][358697430862731][347 ms][DEBUG] END check_scloud in 346 ms [2025-08-23 19:16:03][358697430862731][347 ms][DEBUG] START check_boot_completed [2025-08-23 19:16:03][358697430862731][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:16:03][358697430862731][393 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:16:03][358697430862731][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:16:03][358697430862731][471 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:16:03][358697430862731][472 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:16:03][358697430862731][472 ms][DEBUG] START check_internet [2025-08-23 19:16:03][358697430862731][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:16:04][358697430862731][846 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.540/162.540/162.540/0.000 ms\n [2025-08-23 19:16:04][358697430862731][847 ms][DEBUG] check_internet: online [2025-08-23 19:16:04][358697430862731][847 ms][DEBUG] END check_internet in 375 ms [2025-08-23 19:16:04][358697430862731][847 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:16:04][358697430862731][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430862731\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1127\"}'\'' -e'"" [2025-08-23 19:16:04][358697430862731][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:16:04][358697430862731][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430862731\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1127\"}'\'' -e'"" [2025-08-23 19:16:09][358697430862731][6095 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f7e287b-bd25-4b6a-8118-945aea61febe","id":"QR_3f7e287b-bd25-4b6a-8118-945aea61febe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:16:09][358697430862731][6251 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-23 19:16:09][358697430862731][6251 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-23 19:16:09][358697430862731][6251 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:16:12][359290410653772][0 ms][INFO] === Request start === [2025-08-23 19:16:12][359290410653772][1 ms][DEBUG] START check_scloud [2025-08-23 19:16:12][359290410653772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:16:12][359290410653772][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10195 4970 24102556 81256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:16:12][359290410653772][318 ms][DEBUG] targetPkg: running [2025-08-23 19:16:12][359290410653772][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 19:16:12][359290410653772][318 ms][DEBUG] START check_boot_completed [2025-08-23 19:16:12][359290410653772][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:16:12][359290410653772][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:16:12][359290410653772][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:16:12][359290410653772][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:16:12][359290410653772][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:16:12][359290410653772][411 ms][DEBUG] START check_internet [2025-08-23 19:16:12][359290410653772][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=123 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 123.065/123.065/123.065/0.000 ms\n [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] check_internet: online [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] END check_internet in 235 ms [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:16:12][359290410653772][646 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410653772\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7176\"}'\'' -e'"" [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:16:12][359290410653772][646 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410653772\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7176\"}'\'' -e'"" [2025-08-23 19:16:16][359290410653772][4957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21714dcb-8826-4690-b897-edb878e3bf87","id":"QR_21714dcb-8826-4690-b897-edb878e3bf87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:16:17][359290410653772][5113 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-23 19:16:17][359290410653772][5113 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-23 19:16:17][359290410653772][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:18:03][350792528244773][1 ms][INFO] === Request start === [2025-08-23 19:18:03][350792528244773][1 ms][DEBUG] START check_scloud [2025-08-23 19:18:03][350792528244773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:18:03][350792528244773][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 10195 4970 24205008 88328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:18:03][350792528244773][323 ms][DEBUG] targetPkg: running [2025-08-23 19:18:03][350792528244773][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 19:18:03][350792528244773][323 ms][DEBUG] START check_boot_completed [2025-08-23 19:18:03][350792528244773][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:18:03][350792528244773][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:18:03][350792528244773][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:18:03][350792528244773][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:18:03][350792528244773][417 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:18:03][350792528244773][417 ms][DEBUG] START check_internet [2025-08-23 19:18:03][350792528244773][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.256/258.256/258.256/0.000 ms\n [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] check_internet: online [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] END check_internet in 359 ms [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:18:04][350792528244773][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528244773\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5044\"}'\'' -e'"" [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:18:04][350792528244773][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528244773\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5044\"}'\'' -e'"" [2025-08-23 19:18:08][350792528244773][4791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b9df9aa-9dbc-4055-b57a-f1dfe3339914","id":"QR_0b9df9aa-9dbc-4055-b57a-f1dfe3339914","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:18:08][350792528244773][4947 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-23 19:18:08][350792528244773][4947 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-23 19:18:08][350792528244773][4947 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:21:04][353548759589105][1 ms][INFO] === Request start === [2025-08-23 19:21:04][353548759589105][1 ms][DEBUG] START check_scloud [2025-08-23 19:21:04][353548759589105][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:21:04][353548759589105][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 10195 4970 24351540 97864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:21:04][353548759589105][322 ms][DEBUG] targetPkg: running [2025-08-23 19:21:04][353548759589105][322 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 19:21:04][353548759589105][322 ms][DEBUG] START check_boot_completed [2025-08-23 19:21:04][353548759589105][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:21:04][353548759589105][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:21:04][353548759589105][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:21:04][353548759589105][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:21:04][353548759589105][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:21:04][353548759589105][400 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:21:04][353548759589105][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548759589105\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5348\"}'\'' -e'"" [2025-08-23 19:21:04][353548759589105][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:21:04][353548759589105][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548759589105\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5348\"}'\'' -e'"" [2025-08-23 19:21:10][353548759589105][5914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_301150b6-9b16-45ae-af1f-afcfb58c7964","id":"QR_301150b6-9b16-45ae-af1f-afcfb58c7964","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:21:10][353548759589105][6070 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3343 [2025-08-23 19:21:10][353548759589105][6070 ms][DEBUG] END runCmdUntilRes#1 in 5670 ms [2025-08-23 19:21:10][353548759589105][6070 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:23:03][352665187564640][0 ms][INFO] === Request start === [2025-08-23 19:23:03][352665187564640][1 ms][DEBUG] START check_scloud [2025-08-23 19:23:03][352665187564640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:23:04][352665187564640][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 10195 4970 24487896 103840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:23:04][352665187564640][322 ms][DEBUG] targetPkg: running [2025-08-23 19:23:04][352665187564640][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-23 19:23:04][352665187564640][322 ms][DEBUG] START check_boot_completed [2025-08-23 19:23:04][352665187564640][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:23:04][352665187564640][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:23:04][352665187564640][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:23:04][352665187564640][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:23:04][352665187564640][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:23:04][352665187564640][415 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:23:04][352665187564640][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187564640\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8318\"}'\'' -e'"" [2025-08-23 19:23:04][352665187564640][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:23:04][352665187564640][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187564640\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8318\"}'\'' -e'"" [2025-08-23 19:23:08][352665187564640][4726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32d3124b-5c5a-449d-b409-636bc8d98141","id":"QR_32d3124b-5c5a-449d-b409-636bc8d98141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:23:08][352665187564640][4882 ms][DEBUG] proc_open done in 4468 ms; code=255; res.len=3343 [2025-08-23 19:23:08][352665187564640][4882 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-23 19:23:08][352665187564640][4883 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:28:03][352923542346850][1 ms][INFO] === Request start === [2025-08-23 19:28:03][352923542346850][1 ms][DEBUG] START check_scloud [2025-08-23 19:28:03][352923542346850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:28:03][352923542346850][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 10195 4970 24603708 115056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:28:03][352923542346850][304 ms][DEBUG] targetPkg: running [2025-08-23 19:28:03][352923542346850][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 19:28:03][352923542346850][304 ms][DEBUG] START check_boot_completed [2025-08-23 19:28:03][352923542346850][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:28:03][352923542346850][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:28:03][352923542346850][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:28:03][352923542346850][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:28:03][352923542346850][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:28:03][352923542346850][398 ms][DEBUG] START check_internet [2025-08-23 19:28:03][352923542346850][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.415/200.415/200.415/0.000 ms\n [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] check_internet: online [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] END check_internet in 531 ms [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:28:04][352923542346850][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542346850\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5240\"}'\'' -e'"" [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:28:04][352923542346850][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542346850\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5240\"}'\'' -e'"" [2025-08-23 19:28:08][352923542346850][5131 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c56e581c-3083-4da4-a502-4538b33098ac","id":"QR_c56e581c-3083-4da4-a502-4538b33098ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:28:08][352923542346850][5287 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-23 19:28:08][352923542346850][5287 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-23 19:28:08][352923542346850][5287 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:30:06][357535100567852][1 ms][INFO] === Request start === [2025-08-23 19:30:06][357535100567852][1 ms][DEBUG] START check_scloud [2025-08-23 19:30:06][357535100567852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:30:06][357535100567852][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 10195 4970 24756384 126036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:30:06][357535100567852][312 ms][DEBUG] targetPkg: running [2025-08-23 19:30:06][357535100567852][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 19:30:06][357535100567852][312 ms][DEBUG] START check_boot_completed [2025-08-23 19:30:06][357535100567852][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:30:06][357535100567852][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:30:06][357535100567852][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:30:06][357535100567852][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:30:06][357535100567852][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:30:06][357535100567852][390 ms][DEBUG] START check_internet [2025-08-23 19:30:06][357535100567852][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.785/282.785/282.785/0.000 ms\n [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] check_internet: online [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] END check_internet in 437 ms [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:30:07][357535100567852][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357535100567852\",\"model\":\"SM-N975W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:30:07][357535100567852][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357535100567852\",\"model\":\"SM-N975W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-08-23 19:30:13][357535100567852][7404 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0bc40e1-00de-4379-bf18-6e6f3efb3bf8","id":"QR_b0bc40e1-00de-4379-bf18-6e6f3efb3bf8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:30:13][357535100567852][7560 ms][DEBUG] proc_open done in 6733 ms; code=255; res.len=3343 [2025-08-23 19:30:13][357535100567852][7560 ms][DEBUG] END runCmdUntilRes#1 in 6733 ms [2025-08-23 19:30:13][357535100567852][7560 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:30:20][351617731861544][0 ms][INFO] === Request start === [2025-08-23 19:30:20][351617731861544][0 ms][DEBUG] START check_scloud [2025-08-23 19:30:20][351617731861544][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:30:20][351617731861544][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 10195 4970 24907112 136104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:30:20][351617731861544][310 ms][DEBUG] targetPkg: running [2025-08-23 19:30:20][351617731861544][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 19:30:20][351617731861544][310 ms][DEBUG] START check_boot_completed [2025-08-23 19:30:20][351617731861544][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:30:20][351617731861544][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:30:20][351617731861544][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:30:20][351617731861544][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:30:20][351617731861544][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:30:20][351617731861544][420 ms][DEBUG] START check_internet [2025-08-23 19:30:20][351617731861544][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.633/243.633/243.633/0.000 ms\n [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] check_internet: online [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] END check_internet in 375 ms [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:30:21][351617731861544][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731861544\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7185\"}'\'' -e'"" [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:30:21][351617731861544][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731861544\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7185\"}'\'' -e'"" [2025-08-23 19:30:28][351617731861544][7683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14591ee1-2f24-4d05-955a-dcb120ff1273","id":"QR_14591ee1-2f24-4d05-955a-dcb120ff1273","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:30:28][351617731861544][7839 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3343 [2025-08-23 19:30:28][351617731861544][7839 ms][DEBUG] END runCmdUntilRes#1 in 7044 ms [2025-08-23 19:30:28][351617731861544][7839 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:31:02][352861160669866][0 ms][INFO] === Request start === [2025-08-23 19:31:02][352861160669866][1 ms][DEBUG] START check_scloud [2025-08-23 19:31:02][352861160669866][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:31:03][352861160669866][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 10195 4970 25027112 148072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:31:03][352861160669866][259 ms][DEBUG] targetPkg: running [2025-08-23 19:31:03][352861160669866][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-23 19:31:03][352861160669866][259 ms][DEBUG] START check_boot_completed [2025-08-23 19:31:03][352861160669866][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:31:03][352861160669866][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:31:03][352861160669866][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:31:03][352861160669866][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:31:03][352861160669866][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:31:03][352861160669866][369 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:31:03][352861160669866][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160669866\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3726\"}'\'' -e'"" [2025-08-23 19:31:03][352861160669866][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:31:03][352861160669866][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160669866\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3726\"}'\'' -e'"" [2025-08-23 19:31:07][352861160669866][4492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc93b758-01ab-4191-8ca8-ab88fa73d6db","id":"QR_cc93b758-01ab-4191-8ca8-ab88fa73d6db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:31:07][352861160669866][4648 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-23 19:31:07][352861160669866][4648 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-23 19:31:07][352861160669866][4648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:35:04][355128635261670][1 ms][INFO] === Request start === [2025-08-23 19:35:04][355128635261670][1 ms][DEBUG] START check_scloud [2025-08-23 19:35:04][355128635261670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:35:04][355128635261670][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 10195 4970 25157260 151180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:35:04][355128635261670][304 ms][DEBUG] targetPkg: running [2025-08-23 19:35:04][355128635261670][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 19:35:04][355128635261670][304 ms][DEBUG] START check_boot_completed [2025-08-23 19:35:04][355128635261670][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:35:04][355128635261670][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:35:04][355128635261670][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:35:05][355128635261670][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:35:05][355128635261670][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:35:05][355128635261670][382 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:35:05][355128635261670][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635261670\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7599\"}'\'' -e'"" [2025-08-23 19:35:05][355128635261670][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:35:05][355128635261670][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635261670\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7599\"}'\'' -e'"" [2025-08-23 19:35:09][355128635261670][5162 ms][DEBUG] proc_open done in 4780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 19:35:09][355128635261670][5162 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-23 19:35:09][355128635261670][5162 ms][WARN] Detected error: Process with pid 10195 either refused to load frida-agent, or terminated during injection [2025-08-23 19:35:09][355128635261670][5163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:35:09][355128635261670][5318 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 19:35:09][355128635261670][5318 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:35:09][355128635261670][5318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:35:10][355128635261670][5444 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 19:35:10][355128635261670][5444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:35:10][355128635261670][5615 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:35:12][355128635261670][7630 ms][DEBUG] START check_boot_completed [2025-08-23 19:35:12][355128635261670][7630 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:35:12][355128635261670][7677 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:35:12][355128635261670][7677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:35:12][355128635261670][7724 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:35:12][355128635261670][7724 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:35:15][355128635261670][10739 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:35:15][355128635261670][10739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635261670\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7599\"}'\'' -e'"" [2025-08-23 19:35:20][355128635261670][15909 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adae4682-7870-4438-8274-caefcf66640f","id":"QR_adae4682-7870-4438-8274-caefcf66640f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:35:20][355128635261670][16066 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 19:35:20][355128635261670][16066 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-08-23 19:35:20][355128635261670][16066 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:35:25][353302728009104][0 ms][INFO] === Request start === [2025-08-23 19:35:25][353302728009104][1 ms][DEBUG] START check_scloud [2025-08-23 19:35:25][353302728009104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:35:26][353302728009104][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 20627 4970 23819324 124112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:35:26][353302728009104][247 ms][DEBUG] targetPkg: running [2025-08-23 19:35:26][353302728009104][247 ms][DEBUG] END check_scloud in 247 ms [2025-08-23 19:35:26][353302728009104][247 ms][DEBUG] START check_boot_completed [2025-08-23 19:35:26][353302728009104][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:35:26][353302728009104][294 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:35:26][353302728009104][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:35:26][353302728009104][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:35:26][353302728009104][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:35:26][353302728009104][341 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:35:26][353302728009104][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302728009104\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9910\"}'\'' -e'"" [2025-08-23 19:35:26][353302728009104][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:35:26][353302728009104][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302728009104\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9910\"}'\'' -e'"" [2025-08-23 19:35:30][353302728009104][4527 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cc708a4-bb37-40d0-81f5-9f592cf39bd0","id":"QR_9cc708a4-bb37-40d0-81f5-9f592cf39bd0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:35:30][353302728009104][4684 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-23 19:35:30][353302728009104][4684 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-23 19:35:30][353302728009104][4684 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:37:05][350290813835405][1 ms][INFO] === Request start === [2025-08-23 19:37:05][350290813835405][1 ms][DEBUG] START check_scloud [2025-08-23 19:37:05][350290813835405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:37:05][350290813835405][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 20627 4970 23909400 137348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:37:05][350290813835405][285 ms][DEBUG] targetPkg: running [2025-08-23 19:37:05][350290813835405][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-23 19:37:05][350290813835405][285 ms][DEBUG] START check_boot_completed [2025-08-23 19:37:05][350290813835405][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:37:05][350290813835405][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:37:05][350290813835405][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:37:05][350290813835405][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:37:05][350290813835405][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:37:05][350290813835405][395 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:37:05][350290813835405][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290813835405\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5815\"}'\'' -e'"" [2025-08-23 19:37:05][350290813835405][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:37:05][350290813835405][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290813835405\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5815\"}'\'' -e'"" [2025-08-23 19:37:12][350290813835405][6908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d28dee9-f67e-402d-a74f-b8d5b013f101","id":"QR_9d28dee9-f67e-402d-a74f-b8d5b013f101","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:37:12][350290813835405][7065 ms][DEBUG] proc_open done in 6670 ms; code=255; res.len=3343 [2025-08-23 19:37:12][350290813835405][7065 ms][DEBUG] END runCmdUntilRes#1 in 6670 ms [2025-08-23 19:37:12][350290813835405][7065 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:38:02][352288968639059][1 ms][INFO] === Request start === [2025-08-23 19:38:02][352288968639059][1 ms][DEBUG] START check_scloud [2025-08-23 19:38:02][352288968639059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:38:03][352288968639059][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 20627 4970 24036528 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:38:03][352288968639059][290 ms][DEBUG] targetPkg: running [2025-08-23 19:38:03][352288968639059][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 19:38:03][352288968639059][290 ms][DEBUG] START check_boot_completed [2025-08-23 19:38:03][352288968639059][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:38:03][352288968639059][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:38:03][352288968639059][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:38:03][352288968639059][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:38:03][352288968639059][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:38:03][352288968639059][384 ms][DEBUG] START check_internet [2025-08-23 19:38:03][352288968639059][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:38:03][352288968639059][915 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.395/201.395/201.395/0.000 ms\n [2025-08-23 19:38:03][352288968639059][916 ms][DEBUG] check_internet: online [2025-08-23 19:38:03][352288968639059][916 ms][DEBUG] END check_internet in 532 ms [2025-08-23 19:38:03][352288968639059][916 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:38:03][352288968639059][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9278\"}'\'' -e'"" [2025-08-23 19:38:03][352288968639059][916 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:38:03][352288968639059][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968639059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9278\"}'\'' -e'"" [2025-08-23 19:38:07][352288968639059][4773 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-23 19:38:07][352288968639059][4929 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=115 [2025-08-23 19:38:07][352288968639059][4930 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 19:38:07][352288968639059][4930 ms][INFO] SUCCESS response from frida (len=115) [2025-08-23 19:38:08][][0 ms][INFO] === Request start === [2025-08-23 19:38:08][][1 ms][DEBUG] START check_scloud [2025-08-23 19:38:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:38:08][][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 20627 4970 24211896 160716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:38:08][][299 ms][DEBUG] targetPkg: running [2025-08-23 19:38:08][][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-23 19:38:08][][300 ms][DEBUG] START check_boot_completed [2025-08-23 19:38:08][][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:38:08][][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:38:08][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:38:08][][410 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:38:08][][410 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 19:38:08][][410 ms][DEBUG] START check_internet [2025-08-23 19:38:08][][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:38:09][][721 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.867/155.867/155.867/0.000 ms\n [2025-08-23 19:38:09][][721 ms][DEBUG] check_internet: online [2025-08-23 19:38:09][][722 ms][DEBUG] END check_internet in 312 ms [2025-08-23 19:38:09][][722 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:38:09][][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC03S48R\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7240\"}'\'' -e'"" [2025-08-23 19:38:09][][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:38:09][][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC03S48R\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7240\"}'\'' -e'"" [2025-08-23 19:38:12][][4158 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:38:12][][4314 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=107 [2025-08-23 19:38:12][][4314 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-23 19:38:12][][4314 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:39:02][358438736966698][0 ms][INFO] === Request start === [2025-08-23 19:39:02][358438736966698][1 ms][DEBUG] START check_scloud [2025-08-23 19:39:02][358438736966698][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:39:02][358438736966698][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 20627 4970 24360568 172648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:39:02][358438736966698][298 ms][DEBUG] targetPkg: running [2025-08-23 19:39:02][358438736966698][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 19:39:02][358438736966698][298 ms][DEBUG] START check_boot_completed [2025-08-23 19:39:02][358438736966698][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:39:02][358438736966698][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:39:02][358438736966698][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:39:02][358438736966698][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:39:02][358438736966698][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:39:02][358438736966698][392 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:39:02][358438736966698][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-08-23 19:39:02][358438736966698][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:39:02][358438736966698][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736966698\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-08-23 19:39:06][358438736966698][4172 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:39:06][358438736966698][4328 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-23 19:39:06][358438736966698][4328 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 19:39:06][358438736966698][4328 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:39:06][][0 ms][INFO] === Request start === [2025-08-23 19:39:06][][1 ms][DEBUG] START check_scloud [2025-08-23 19:39:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:39:07][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20627 4970 24494912 183416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:39:07][][307 ms][DEBUG] targetPkg: running [2025-08-23 19:39:07][][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 19:39:07][][307 ms][DEBUG] START check_boot_completed [2025-08-23 19:39:07][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:39:07][][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:39:07][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:39:07][][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:39:07][][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:39:07][][385 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:39:07][][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB04HWSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-23 19:39:07][][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:39:07][][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB04HWSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-23 19:39:11][][4181 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:39:11][][4337 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=107 [2025-08-23 19:39:11][][4337 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 19:39:11][][4337 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:40:02][351317840272390][0 ms][INFO] === Request start === [2025-08-23 19:40:02][351317840272390][1 ms][DEBUG] START check_scloud [2025-08-23 19:40:02][351317840272390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:40:02][351317840272390][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20627 4970 24627200 195416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:40:02][351317840272390][308 ms][DEBUG] targetPkg: running [2025-08-23 19:40:02][351317840272390][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 19:40:02][351317840272390][308 ms][DEBUG] START check_boot_completed [2025-08-23 19:40:02][351317840272390][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:40:02][351317840272390][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:40:02][351317840272390][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:40:02][351317840272390][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:40:02][351317840272390][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:40:02][351317840272390][386 ms][DEBUG] START check_internet [2025-08-23 19:40:02][351317840272390][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:40:03][351317840272390][714 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.572/224.572/224.572/0.000 ms\n [2025-08-23 19:40:03][351317840272390][714 ms][DEBUG] check_internet: online [2025-08-23 19:40:03][351317840272390][714 ms][DEBUG] END check_internet in 328 ms [2025-08-23 19:40:03][351317840272390][714 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:40:03][351317840272390][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-08-23 19:40:03][351317840272390][715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:40:03][351317840272390][715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840272390\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-08-23 19:40:06][351317840272390][4369 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:40:07][351317840272390][4526 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-23 19:40:07][351317840272390][4526 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 19:40:07][351317840272390][4526 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:40:07][][1 ms][INFO] === Request start === [2025-08-23 19:40:07][][1 ms][DEBUG] START check_scloud [2025-08-23 19:40:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:40:07][][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 20627 4970 24798472 206124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:40:07][][297 ms][DEBUG] targetPkg: running [2025-08-23 19:40:07][][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 19:40:07][][298 ms][DEBUG] START check_boot_completed [2025-08-23 19:40:07][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:40:07][][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:40:07][][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:40:07][][438 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 19:40:07][][438 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 19:40:07][][438 ms][DEBUG] START check_internet [2025-08-23 19:40:07][][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:40:08][][703 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.361/155.361/155.361/0.000 ms\n [2025-08-23 19:40:08][][703 ms][DEBUG] check_internet: online [2025-08-23 19:40:08][][703 ms][DEBUG] END check_internet in 265 ms [2025-08-23 19:40:08][][703 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:40:08][][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY13G10FB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2832\"}'\'' -e'"" [2025-08-23 19:40:08][][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:40:08][][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY13G10FB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2832\"}'\'' -e'"" [2025-08-23 19:40:11][][4359 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:40:11][][4515 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-23 19:40:11][][4515 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 19:40:11][][4515 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:41:02][353243885388081][0 ms][INFO] === Request start === [2025-08-23 19:41:02][353243885388081][1 ms][DEBUG] START check_scloud [2025-08-23 19:41:02][353243885388081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:41:02][353243885388081][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 20627 4970 24930632 217052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:41:02][353243885388081][257 ms][DEBUG] targetPkg: running [2025-08-23 19:41:02][353243885388081][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-23 19:41:02][353243885388081][258 ms][DEBUG] START check_boot_completed [2025-08-23 19:41:02][353243885388081][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:41:02][353243885388081][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:41:02][353243885388081][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:41:03][353243885388081][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:41:03][353243885388081][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:41:03][353243885388081][336 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:41:03][353243885388081][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4405\"}'\'' -e'"" [2025-08-23 19:41:03][353243885388081][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:41:03][353243885388081][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885388081\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4405\"}'\'' -e'"" [2025-08-23 19:41:06][353243885388081][4256 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:41:07][353243885388081][4412 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=107 [2025-08-23 19:41:07][353243885388081][4413 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-23 19:41:07][353243885388081][4413 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:41:07][][0 ms][INFO] === Request start === [2025-08-23 19:41:07][][1 ms][DEBUG] START check_scloud [2025-08-23 19:41:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:41:07][][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 20627 4970 25067088 228908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:41:07][][283 ms][DEBUG] targetPkg: running [2025-08-23 19:41:07][][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 19:41:07][][283 ms][DEBUG] START check_boot_completed [2025-08-23 19:41:07][][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:41:07][][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:41:07][][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:41:07][][423 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 19:41:07][][424 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 19:41:07][][424 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:41:07][][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5008\"}'\'' -e'"" [2025-08-23 19:41:07][][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:41:07][][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T60SMVZP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5008\"}'\'' -e'"" [2025-08-23 19:41:11][][3985 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:41:11][][4141 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=107 [2025-08-23 19:41:11][][4141 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-23 19:41:11][][4141 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:41:12][353424470348306][0 ms][INFO] === Request start === [2025-08-23 19:41:12][353424470348306][1 ms][DEBUG] START check_scloud [2025-08-23 19:41:12][353424470348306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:41:12][353424470348306][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 20627 4970 25246552 240652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:41:12][353424470348306][291 ms][DEBUG] targetPkg: running [2025-08-23 19:41:12][353424470348306][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-23 19:41:12][353424470348306][291 ms][DEBUG] START check_boot_completed [2025-08-23 19:41:12][353424470348306][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:41:12][353424470348306][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:41:12][353424470348306][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:41:12][353424470348306][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:41:12][353424470348306][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:41:12][353424470348306][401 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:41:12][353424470348306][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353424470348306\",\"model\":\"SM-S908N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9541\"}'\'' -e'"" [2025-08-23 19:41:12][353424470348306][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:41:12][353424470348306][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353424470348306\",\"model\":\"SM-S908N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9541\"}'\'' -e'"" [2025-08-23 19:41:16][353424470348306][4134 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 19:41:16][353424470348306][4134 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-23 19:41:16][353424470348306][4134 ms][WARN] Detected error: Process with pid 20627 either refused to load frida-agent, or terminated during injection [2025-08-23 19:41:16][353424470348306][4134 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:41:16][353424470348306][4290 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 19:41:16][353424470348306][4290 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:41:16][353424470348306][4291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:41:16][353424470348306][4446 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 19:41:16][353424470348306][4447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:41:17][353424470348306][4603 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:41:19][353424470348306][6618 ms][DEBUG] START check_boot_completed [2025-08-23 19:41:19][353424470348306][6618 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:41:19][353424470348306][6665 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:41:19][353424470348306][6665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:41:19][353424470348306][6711 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:41:19][353424470348306][6712 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:41:22][353424470348306][9726 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:41:22][353424470348306][9726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353424470348306\",\"model\":\"SM-S908N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9541\"}'\'' -e'"" [2025-08-23 19:41:26][353424470348306][13866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e0d0153-e03a-4718-9f83-08e934ec0401","id":"QR_4e0d0153-e03a-4718-9f83-08e934ec0401","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:41:26][353424470348306][14022 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-23 19:41:26][353424470348306][14022 ms][DEBUG] END runCmdUntilRes#2 in 4296 ms [2025-08-23 19:41:26][353424470348306][14022 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:43:04][350272257328329][1 ms][INFO] === Request start === [2025-08-23 19:43:04][350272257328329][1 ms][DEBUG] START check_scloud [2025-08-23 19:43:04][350272257328329][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:43:05][350272257328329][291 ms][DEBUG] SU: done in 289 ms; outu0_a118 21844 4970 23710612 126952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:43:05][350272257328329][291 ms][DEBUG] targetPkg: running [2025-08-23 19:43:05][350272257328329][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-23 19:43:05][350272257328329][291 ms][DEBUG] START check_boot_completed [2025-08-23 19:43:05][350272257328329][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:43:05][350272257328329][336 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 19:43:05][350272257328329][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:43:05][350272257328329][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:43:05][350272257328329][383 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 19:43:05][350272257328329][383 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:43:05][350272257328329][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-08-23 19:43:05][350272257328329][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:43:05][350272257328329][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-08-23 19:43:09][350272257328329][4179 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:43:09][350272257328329][4335 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=107 [2025-08-23 19:43:09][350272257328329][4335 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 19:43:09][350272257328329][4335 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:43:09][][0 ms][INFO] === Request start === [2025-08-23 19:43:09][][1 ms][DEBUG] START check_scloud [2025-08-23 19:43:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:43:09][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21844 4970 23860152 137524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:43:09][][311 ms][DEBUG] targetPkg: running [2025-08-23 19:43:09][][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 19:43:09][][311 ms][DEBUG] START check_boot_completed [2025-08-23 19:43:09][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:43:10][][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:43:10][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:43:10][][406 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 19:43:10][][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 19:43:10][][406 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:43:10][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT603L2GY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8175\"}'\'' -e'"" [2025-08-23 19:43:10][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:43:10][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT603L2GY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8175\"}'\'' -e'"" [2025-08-23 19:43:13][][4029 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:43:13][][4185 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=107 [2025-08-23 19:43:13][][4185 ms][DEBUG] END runCmdUntilRes#1 in 3779 ms [2025-08-23 19:43:13][][4185 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:43:16][350272257328329][0 ms][INFO] === Request start === [2025-08-23 19:43:16][350272257328329][1 ms][DEBUG] START check_scloud [2025-08-23 19:43:16][350272257328329][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:43:16][350272257328329][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 21844 4970 24010624 149072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:43:16][350272257328329][301 ms][DEBUG] targetPkg: running [2025-08-23 19:43:16][350272257328329][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 19:43:16][350272257328329][301 ms][DEBUG] START check_boot_completed [2025-08-23 19:43:16][350272257328329][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:43:16][350272257328329][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:43:16][350272257328329][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:43:16][350272257328329][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:43:16][350272257328329][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:43:16][350272257328329][379 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:43:16][350272257328329][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9873\"}'\'' -e'"" [2025-08-23 19:43:16][350272257328329][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:43:16][350272257328329][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9873\"}'\'' -e'"" [2025-08-23 19:43:21][350272257328329][5612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce8a9dca-13e4-41fc-91aa-9531c94bbf24","id":"QR_ce8a9dca-13e4-41fc-91aa-9531c94bbf24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:43:21][350272257328329][5769 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-08-23 19:43:21][350272257328329][5769 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-23 19:43:21][350272257328329][5769 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:44:02][356533284128618][0 ms][INFO] === Request start === [2025-08-23 19:44:02][356533284128618][1 ms][DEBUG] START check_scloud [2025-08-23 19:44:02][356533284128618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:44:02][356533284128618][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 21844 4970 24122440 160756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:44:02][356533284128618][294 ms][DEBUG] targetPkg: running [2025-08-23 19:44:02][356533284128618][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 19:44:02][356533284128618][294 ms][DEBUG] START check_boot_completed [2025-08-23 19:44:02][356533284128618][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:44:02][356533284128618][339 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 19:44:02][356533284128618][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:44:02][356533284128618][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:44:02][356533284128618][402 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 19:44:02][356533284128618][402 ms][DEBUG] START check_internet [2025-08-23 19:44:02][356533284128618][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.080/203.080/203.080/0.000 ms\n [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] check_internet: online [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] END check_internet in 500 ms [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:44:03][356533284128618][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356533284128618\",\"model\":\"SM-M536S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:44:03][356533284128618][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356533284128618\",\"model\":\"SM-M536S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-08-23 19:44:07][356533284128618][4650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1f70a24-32b0-4bad-9279-3281bcd199e7","id":"QR_c1f70a24-32b0-4bad-9279-3281bcd199e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:44:07][356533284128618][4807 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-23 19:44:07][356533284128618][4807 ms][DEBUG] END runCmdUntilRes#1 in 3904 ms [2025-08-23 19:44:07][356533284128618][4807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:47:02][350938289429802][1 ms][INFO] === Request start === [2025-08-23 19:47:02][350938289429802][1 ms][DEBUG] START check_scloud [2025-08-23 19:47:02][350938289429802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:47:02][350938289429802][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 21844 4970 24288456 171888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:47:02][350938289429802][308 ms][DEBUG] targetPkg: running [2025-08-23 19:47:02][350938289429802][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 19:47:02][350938289429802][308 ms][DEBUG] START check_boot_completed [2025-08-23 19:47:02][350938289429802][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:47:02][350938289429802][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:47:02][350938289429802][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:47:02][350938289429802][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:47:02][350938289429802][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:47:02][350938289429802][402 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:47:02][350938289429802][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4893\"}'\'' -e'"" [2025-08-23 19:47:02][350938289429802][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:47:02][350938289429802][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289429802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4893\"}'\'' -e'"" [2025-08-23 19:47:06][350938289429802][4275 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:47:06][350938289429802][4432 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=107 [2025-08-23 19:47:06][350938289429802][4432 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 19:47:06][350938289429802][4432 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:47:06][][0 ms][INFO] === Request start === [2025-08-23 19:47:06][][1 ms][DEBUG] START check_scloud [2025-08-23 19:47:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:47:07][][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 21844 4970 24442320 183864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:47:07][][296 ms][DEBUG] targetPkg: running [2025-08-23 19:47:07][][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-23 19:47:07][][296 ms][DEBUG] START check_boot_completed [2025-08-23 19:47:07][][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:47:07][][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:47:07][][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:47:07][][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:47:07][][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:47:07][][375 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:47:07][][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20QVWWB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2450\"}'\'' -e'"" [2025-08-23 19:47:07][][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:47:07][][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20QVWWB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2450\"}'\'' -e'"" [2025-08-23 19:47:10][][3686 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:47:10][][3842 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=107 [2025-08-23 19:47:10][][3842 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-08-23 19:47:10][][3842 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:48:02][353310805122799][0 ms][INFO] === Request start === [2025-08-23 19:48:02][353310805122799][1 ms][DEBUG] START check_scloud [2025-08-23 19:48:02][353310805122799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:48:03][353310805122799][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21844 4970 24594576 196036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:48:03][353310805122799][306 ms][DEBUG] targetPkg: running [2025-08-23 19:48:03][353310805122799][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 19:48:03][353310805122799][306 ms][DEBUG] START check_boot_completed [2025-08-23 19:48:03][353310805122799][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:48:03][353310805122799][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:48:03][353310805122799][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:48:03][353310805122799][447 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 19:48:03][353310805122799][447 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 19:48:03][353310805122799][447 ms][DEBUG] START check_internet [2025-08-23 19:48:03][353310805122799][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:48:03][353310805122799][915 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.173/201.173/201.173/0.000 ms\n [2025-08-23 19:48:03][353310805122799][915 ms][DEBUG] check_internet: online [2025-08-23 19:48:03][353310805122799][916 ms][DEBUG] END check_internet in 469 ms [2025-08-23 19:48:03][353310805122799][916 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:48:03][353310805122799][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6999\"}'\'' -e'"" [2025-08-23 19:48:03][353310805122799][916 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:48:03][353310805122799][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6999\"}'\'' -e'"" [2025-08-23 19:48:07][353310805122799][4899 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ae44522-e7e6-4fdf-9c4f-6b40f09c492d","id":"QR_0ae44522-e7e6-4fdf-9c4f-6b40f09c492d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:48:07][353310805122799][5055 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-23 19:48:07][353310805122799][5055 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-23 19:48:07][353310805122799][5055 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:49:05][353766500210603][1 ms][INFO] === Request start === [2025-08-23 19:49:05][353766500210603][1 ms][DEBUG] START check_scloud [2025-08-23 19:49:05][353766500210603][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:49:05][353766500210603][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 21844 4970 24704244 207276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:49:05][353766500210603][304 ms][DEBUG] targetPkg: running [2025-08-23 19:49:05][353766500210603][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 19:49:05][353766500210603][304 ms][DEBUG] START check_boot_completed [2025-08-23 19:49:05][353766500210603][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:49:05][353766500210603][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:49:05][353766500210603][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:49:05][353766500210603][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:49:05][353766500210603][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:49:05][353766500210603][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:49:05][353766500210603][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353766500210603\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1896\"}'\'' -e'"" [2025-08-23 19:49:05][353766500210603][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:49:05][353766500210603][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353766500210603\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1896\"}'\'' -e'"" [2025-08-23 19:49:10][353766500210603][5896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_496f6513-88ca-438a-8559-341eed5d70ee","id":"QR_496f6513-88ca-438a-8559-341eed5d70ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:49:11][353766500210603][6052 ms][DEBUG] proc_open done in 5638 ms; code=255; res.len=3343 [2025-08-23 19:49:11][353766500210603][6052 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-23 19:49:11][353766500210603][6052 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:51:03][351044510816419][1 ms][INFO] === Request start === [2025-08-23 19:51:03][351044510816419][1 ms][DEBUG] START check_scloud [2025-08-23 19:51:03][351044510816419][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:51:03][351044510816419][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 21844 4970 24832344 217916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:51:03][351044510816419][300 ms][DEBUG] targetPkg: running [2025-08-23 19:51:03][351044510816419][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-23 19:51:03][351044510816419][300 ms][DEBUG] START check_boot_completed [2025-08-23 19:51:03][351044510816419][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:51:03][351044510816419][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:51:03][351044510816419][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:51:03][351044510816419][424 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:51:03][351044510816419][424 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:51:03][351044510816419][424 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:51:03][351044510816419][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510816419\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1475\"}'\'' -e'"" [2025-08-23 19:51:03][351044510816419][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:51:03][351044510816419][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510816419\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1475\"}'\'' -e'"" [2025-08-23 19:51:08][351044510816419][4705 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d13f6fe-2023-4a9b-9690-702c64d94b4f","id":"QR_5d13f6fe-2023-4a9b-9690-702c64d94b4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:51:08][351044510816419][4861 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 19:51:08][351044510816419][4861 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 19:51:08][351044510816419][4861 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:51:12][354775290291151][0 ms][INFO] === Request start === [2025-08-23 19:51:12][354775290291151][0 ms][DEBUG] START check_scloud [2025-08-23 19:51:12][354775290291151][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:51:12][354775290291151][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 21844 4970 24958368 188348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:51:12][354775290291151][284 ms][DEBUG] targetPkg: running [2025-08-23 19:51:12][354775290291151][284 ms][DEBUG] END check_scloud in 284 ms [2025-08-23 19:51:12][354775290291151][284 ms][DEBUG] START check_boot_completed [2025-08-23 19:51:12][354775290291151][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:51:12][354775290291151][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:51:12][354775290291151][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:51:12][354775290291151][377 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:51:12][354775290291151][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:51:12][354775290291151][378 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:51:12][354775290291151][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290291151\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4672\"}'\'' -e'"" [2025-08-23 19:51:12][354775290291151][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:51:12][354775290291151][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290291151\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4672\"}'\'' -e'"" [2025-08-23 19:51:19][354775290291151][6970 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e4ae22c-3ae6-4037-9d10-133805c292cf","id":"QR_5e4ae22c-3ae6-4037-9d10-133805c292cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:51:19][354775290291151][7126 ms][DEBUG] proc_open done in 6747 ms; code=255; res.len=3343 [2025-08-23 19:51:19][354775290291151][7126 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-23 19:51:19][354775290291151][7126 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:51:23][355084250901936][0 ms][INFO] === Request start === [2025-08-23 19:51:23][355084250901936][1 ms][DEBUG] START check_scloud [2025-08-23 19:51:23][355084250901936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:51:24][355084250901936][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 21844 4970 25102980 192292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:51:24][355084250901936][317 ms][DEBUG] targetPkg: running [2025-08-23 19:51:24][355084250901936][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 19:51:24][355084250901936][317 ms][DEBUG] START check_boot_completed [2025-08-23 19:51:24][355084250901936][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:51:24][355084250901936][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:51:24][355084250901936][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:51:24][355084250901936][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:51:24][355084250901936][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:51:24][355084250901936][426 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:51:24][355084250901936][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4321\"}'\'' -e'"" [2025-08-23 19:51:24][355084250901936][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:51:24][355084250901936][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4321\"}'\'' -e'"" [2025-08-23 19:51:32][355084250901936][8440 ms][DEBUG] proc_open done in 8013 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 19:51:32][355084250901936][8440 ms][DEBUG] END runCmdUntilRes#1 in 8013 ms [2025-08-23 19:51:32][355084250901936][8440 ms][WARN] Detected error: Process with pid 21844 either refused to load frida-agent, or terminated during injection [2025-08-23 19:51:32][355084250901936][8440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:51:32][355084250901936][8674 ms][DEBUG] SU: done in 234 ms; out [2025-08-23 19:51:32][355084250901936][8674 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:51:32][355084250901936][8674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:51:32][355084250901936][8908 ms][DEBUG] SU: done in 234 ms; out [2025-08-23 19:51:32][355084250901936][8908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:51:33][355084250901936][9174 ms][DEBUG] SU: done in 265 ms; out [2025-08-23 19:51:35][355084250901936][11189 ms][DEBUG] START check_boot_completed [2025-08-23 19:51:35][355084250901936][11189 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:51:35][355084250901936][11236 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:51:35][355084250901936][11236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:51:35][355084250901936][11314 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 19:51:35][355084250901936][11314 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 19:51:38][355084250901936][14329 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:51:38][355084250901936][14329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4321\"}'\'' -e'"" [2025-08-23 19:51:39][355084250901936][15844 ms][DEBUG] proc_open done in 1515 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 19:51:39][355084250901936][15844 ms][DEBUG] END runCmdUntilRes#2 in 1516 ms [2025-08-23 19:51:39][355084250901936][15844 ms][WARN] Detected error 2; Reboot the device [2025-08-23 19:51:39][355084250901936][15844 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 19:51:40][355084250901936][16453 ms][DEBUG] SU: done in 609 ms; out [2025-08-23 19:52:02][355084250901936][0 ms][INFO] === Request start === [2025-08-23 19:52:02][355084250901936][1 ms][DEBUG] START check_scloud [2025-08-23 19:52:02][355084250901936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:52:02][355084250901936][38 ms][DEBUG] SU: done in 37 ms; out [2025-08-23 19:52:02][355084250901936][38 ms][WARN] targetPkg: not running, restarting [2025-08-23 19:52:02][355084250901936][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:52:02][355084250901936][69 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 19:52:02][355084250901936][69 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:52:02][355084250901936][100 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 19:52:04][355084250901936][2115 ms][DEBUG] END check_scloud in 2114 ms [2025-08-23 19:52:04][355084250901936][2115 ms][DEBUG] START check_boot_completed [2025-08-23 19:52:04][355084250901936][2115 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:52:41][355084250901936][38714 ms][DEBUG] ADB: done in 36599 ms; out [2025-08-23 19:52:41][355084250901936][38714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:52:41][355084250901936][38761 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:52:41][355084250901936][38761 ms][DEBUG] END check_boot_completed in 36645 ms [2025-08-23 19:52:41][355084250901936][38761 ms][DEBUG] START check_internet [2025-08-23 19:52:41][355084250901936][38761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:52:41][355084250901936][38870 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 19:52:41][355084250901936][38870 ms][WARN] check_internet: offline [2025-08-23 19:52:41][355084250901936][38870 ms][DEBUG] END check_internet in 110 ms [2025-08-23 19:53:02][355084250901936][0 ms][INFO] === Request start === [2025-08-23 19:53:02][355084250901936][1 ms][DEBUG] START check_scloud [2025-08-23 19:53:02][355084250901936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:53:02][355084250901936][403 ms][DEBUG] SU: done in 402 ms; out [2025-08-23 19:53:02][355084250901936][403 ms][WARN] targetPkg: not running, restarting [2025-08-23 19:53:02][355084250901936][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:53:02][355084250901936][544 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 19:53:02][355084250901936][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:53:02][355084250901936][809 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:53:04][355084250901936][2824 ms][DEBUG] END check_scloud in 2824 ms [2025-08-23 19:53:04][355084250901936][2824 ms][DEBUG] START check_boot_completed [2025-08-23 19:53:04][355084250901936][2824 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:53:04][355084250901936][2871 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:53:04][355084250901936][2871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:53:04][355084250901936][2934 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:53:04][355084250901936][2934 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 19:53:04][355084250901936][2934 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:53:04][355084250901936][2934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4939\"}'\'' -e'"" [2025-08-23 19:53:04][355084250901936][2934 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:53:04][355084250901936][2934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901936\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4939\"}'\'' -e'"" [2025-08-23 19:53:11][355084250901936][9463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd1b348e-ee60-4a48-8b64-6a1dfb1b95d9","id":"QR_dd1b348e-ee60-4a48-8b64-6a1dfb1b95d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:53:11][355084250901936][9620 ms][DEBUG] proc_open done in 6685 ms; code=255; res.len=3343 [2025-08-23 19:53:11][355084250901936][9620 ms][DEBUG] END runCmdUntilRes#1 in 6685 ms [2025-08-23 19:53:11][355084250901936][9620 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:53:13][354454653172222][1 ms][INFO] === Request start === [2025-08-23 19:53:13][354454653172222][1 ms][DEBUG] START check_scloud [2025-08-23 19:53:13][354454653172222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:53:13][354454653172222][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 9875 5012 23673376 110136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:53:13][354454653172222][306 ms][DEBUG] targetPkg: running [2025-08-23 19:53:13][354454653172222][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 19:53:13][354454653172222][307 ms][DEBUG] START check_boot_completed [2025-08-23 19:53:13][354454653172222][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:53:13][354454653172222][352 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 19:53:13][354454653172222][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:53:13][354454653172222][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:53:13][354454653172222][414 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 19:53:13][354454653172222][414 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:53:13][354454653172222][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5329\"}'\'' -e'"" [2025-08-23 19:53:13][354454653172222][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:53:13][354454653172222][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5329\"}'\'' -e'"" [2025-08-23 19:53:18][354454653172222][5350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d5f8ffc-ef8f-46bb-9cb8-54ffcbb96828","id":"QR_3d5f8ffc-ef8f-46bb-9cb8-54ffcbb96828","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:53:18][354454653172222][5507 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-23 19:53:18][354454653172222][5507 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-23 19:53:18][354454653172222][5507 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:53:21][351813977583583][0 ms][INFO] === Request start === [2025-08-23 19:53:21][351813977583583][1 ms][DEBUG] START check_scloud [2025-08-23 19:53:21][351813977583583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:53:21][351813977583583][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 9875 5012 23805608 90592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:53:21][351813977583583][337 ms][DEBUG] targetPkg: running [2025-08-23 19:53:21][351813977583583][337 ms][DEBUG] END check_scloud in 337 ms [2025-08-23 19:53:21][351813977583583][337 ms][DEBUG] START check_boot_completed [2025-08-23 19:53:21][351813977583583][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:53:21][351813977583583][384 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:53:21][351813977583583][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:53:21][351813977583583][446 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:53:21][351813977583583][446 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:53:21][351813977583583][446 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:53:21][351813977583583][446 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813977583583\",\"model\":\"SM-A266M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2150\"}'\'' -e'"" [2025-08-23 19:53:21][351813977583583][446 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:53:21][351813977583583][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351813977583583\",\"model\":\"SM-A266M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2150\"}'\'' -e'"" [2025-08-23 19:53:29][351813977583583][7538 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b700f45-2346-411a-b7fa-89361313bd74","id":"QR_7b700f45-2346-411a-b7fa-89361313bd74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:53:29][351813977583583][7694 ms][DEBUG] proc_open done in 7248 ms; code=255; res.len=3343 [2025-08-23 19:53:29][351813977583583][7694 ms][DEBUG] END runCmdUntilRes#1 in 7248 ms [2025-08-23 19:53:29][351813977583583][7695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:53:33][358649680579549][0 ms][INFO] === Request start === [2025-08-23 19:53:33][358649680579549][1 ms][DEBUG] START check_scloud [2025-08-23 19:53:33][358649680579549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:53:33][358649680579549][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 9875 5012 23938520 78472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:53:33][358649680579549][328 ms][DEBUG] targetPkg: running [2025-08-23 19:53:33][358649680579549][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-23 19:53:33][358649680579549][328 ms][DEBUG] START check_boot_completed [2025-08-23 19:53:33][358649680579549][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:53:33][358649680579549][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:53:33][358649680579549][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:53:33][358649680579549][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:53:33][358649680579549][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:53:33][358649680579549][437 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:53:33][358649680579549][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649680579549\",\"model\":\"SM-G998D\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2790\"}'\'' -e'"" [2025-08-23 19:53:33][358649680579549][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:53:33][358649680579549][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649680579549\",\"model\":\"SM-G998D\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2790\"}'\'' -e'"" [2025-08-23 19:53:38][358649680579549][4983 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77e0401a-c181-4a69-842a-fd74c54e3767","id":"QR_77e0401a-c181-4a69-842a-fd74c54e3767","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:53:38][358649680579549][5139 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-23 19:53:38][358649680579549][5139 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-23 19:53:38][358649680579549][5139 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:54:03][354916441125266][0 ms][INFO] === Request start === [2025-08-23 19:54:03][354916441125266][1 ms][DEBUG] START check_scloud [2025-08-23 19:54:03][354916441125266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:54:03][354916441125266][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 9875 5012 23978308 60840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:54:03][354916441125266][303 ms][DEBUG] targetPkg: running [2025-08-23 19:54:03][354916441125266][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 19:54:03][354916441125266][303 ms][DEBUG] START check_boot_completed [2025-08-23 19:54:03][354916441125266][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:54:03][354916441125266][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:54:03][354916441125266][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:54:03][354916441125266][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:54:03][354916441125266][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:54:03][354916441125266][396 ms][DEBUG] START check_internet [2025-08-23 19:54:03][354916441125266][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.440/153.440/153.440/0.000 ms\n [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] check_internet: online [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] END check_internet in 485 ms [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:54:04][354916441125266][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916441125266\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4795\"}'\'' -e'"" [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:54:04][354916441125266][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916441125266\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4795\"}'\'' -e'"" [2025-08-23 19:54:08][354916441125266][4973 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_570529d9-0fef-450f-96e1-6f46c70726bb","id":"QR_570529d9-0fef-450f-96e1-6f46c70726bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:54:08][354916441125266][5129 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 19:54:08][354916441125266][5129 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 19:54:08][354916441125266][5129 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:54:11][352693795868534][0 ms][INFO] === Request start === [2025-08-23 19:54:11][352693795868534][1 ms][DEBUG] START check_scloud [2025-08-23 19:54:11][352693795868534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:54:11][352693795868534][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 9875 5012 24126988 81772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:54:11][352693795868534][284 ms][DEBUG] targetPkg: running [2025-08-23 19:54:11][352693795868534][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-23 19:54:11][352693795868534][285 ms][DEBUG] START check_boot_completed [2025-08-23 19:54:11][352693795868534][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:54:11][352693795868534][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:54:11][352693795868534][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:54:11][352693795868534][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 19:54:11][352693795868534][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:54:11][352693795868534][394 ms][DEBUG] START check_internet [2025-08-23 19:54:11][352693795868534][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.381/246.381/246.381/0.000 ms\n [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] check_internet: online [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] END check_internet in 361 ms [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:54:12][352693795868534][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795868534\",\"model\":\"SM-S721W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3741\"}'\'' -e'"" [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:54:12][352693795868534][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795868534\",\"model\":\"SM-S721W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3741\"}'\'' -e'"" [2025-08-23 19:54:18][352693795868534][6720 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f1bb79c-ac0d-447f-905b-07c0b760312c","id":"QR_2f1bb79c-ac0d-447f-905b-07c0b760312c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:54:18][352693795868534][6876 ms][DEBUG] proc_open done in 6121 ms; code=255; res.len=3343 [2025-08-23 19:54:18][352693795868534][6876 ms][DEBUG] END runCmdUntilRes#1 in 6121 ms [2025-08-23 19:54:18][352693795868534][6876 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:54:23][356380561532959][0 ms][INFO] === Request start === [2025-08-23 19:54:23][356380561532959][1 ms][DEBUG] START check_scloud [2025-08-23 19:54:23][356380561532959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:54:24][356380561532959][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 9875 5012 24287920 98468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:54:24][356380561532959][293 ms][DEBUG] targetPkg: running [2025-08-23 19:54:24][356380561532959][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-23 19:54:24][356380561532959][294 ms][DEBUG] START check_boot_completed [2025-08-23 19:54:24][356380561532959][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:54:24][356380561532959][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:54:24][356380561532959][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:54:24][356380561532959][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:54:24][356380561532959][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:54:24][356380561532959][387 ms][DEBUG] START check_internet [2025-08-23 19:54:24][356380561532959][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:54:24][356380561532959][699 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.960/199.960/199.960/0.000 ms\n [2025-08-23 19:54:24][356380561532959][700 ms][DEBUG] check_internet: online [2025-08-23 19:54:24][356380561532959][700 ms][DEBUG] END check_internet in 313 ms [2025-08-23 19:54:24][356380561532959][700 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:54:24][356380561532959][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561532959\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9609\"}'\'' -e'"" [2025-08-23 19:54:24][356380561532959][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:54:24][356380561532959][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561532959\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9609\"}'\'' -e'"" [2025-08-23 19:54:29][356380561532959][5948 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b5ddada-a0af-499f-bff9-8ad8cae34fce","id":"QR_9b5ddada-a0af-499f-bff9-8ad8cae34fce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:54:29][356380561532959][6104 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-23 19:54:29][356380561532959][6104 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-23 19:54:29][356380561532959][6104 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:55:02][358212584990492][0 ms][INFO] === Request start === [2025-08-23 19:55:02][358212584990492][1 ms][DEBUG] START check_scloud [2025-08-23 19:55:02][358212584990492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:55:02][358212584990492][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 9875 5012 24411888 110548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:55:02][358212584990492][308 ms][DEBUG] targetPkg: running [2025-08-23 19:55:02][358212584990492][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 19:55:02][358212584990492][308 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:02][358212584990492][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:02][358212584990492][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:55:02][358212584990492][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:02][358212584990492][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 19:55:02][358212584990492][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 19:55:02][358212584990492][404 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:55:02][358212584990492][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-23 19:55:02][358212584990492][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:55:02][358212584990492][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-23 19:55:06][358212584990492][4494 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbbc91ac-ef42-4772-a469-4d08393e63cd","id":"QR_cbbc91ac-ef42-4772-a469-4d08393e63cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:55:07][358212584990492][4651 ms][DEBUG] proc_open done in 4247 ms; code=255; res.len=3343 [2025-08-23 19:55:07][358212584990492][4651 ms][DEBUG] END runCmdUntilRes#1 in 4247 ms [2025-08-23 19:55:07][358212584990492][4651 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:55:09][355322291571882][0 ms][INFO] === Request start === [2025-08-23 19:55:09][355322291571882][1 ms][DEBUG] START check_scloud [2025-08-23 19:55:09][355322291571882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:55:09][355322291571882][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 9875 5012 24541100 122576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:55:09][355322291571882][278 ms][DEBUG] targetPkg: running [2025-08-23 19:55:09][355322291571882][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-23 19:55:09][355322291571882][278 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:09][355322291571882][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:09][355322291571882][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:55:09][355322291571882][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:09][355322291571882][418 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 19:55:09][355322291571882][418 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 19:55:09][355322291571882][418 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:55:09][355322291571882][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291571882\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4018\"}'\'' -e'"" [2025-08-23 19:55:09][355322291571882][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:55:09][355322291571882][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291571882\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4018\"}'\'' -e'"" [2025-08-23 19:55:13][355322291571882][4073 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6483c0a6-e1c7-49c8-955f-8f603ac1a6a9","id":"QR_6483c0a6-e1c7-49c8-955f-8f603ac1a6a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:55:13][355322291571882][4229 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-23 19:55:13][355322291571882][4229 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-23 19:55:13][355322291571882][4229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:55:15][350391370140260][1 ms][INFO] === Request start === [2025-08-23 19:55:15][350391370140260][1 ms][DEBUG] START check_scloud [2025-08-23 19:55:15][350391370140260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:55:15][350391370140260][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 9875 5012 24695860 134512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:55:15][350391370140260][318 ms][DEBUG] targetPkg: running [2025-08-23 19:55:15][350391370140260][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 19:55:15][350391370140260][319 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:15][350391370140260][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:15][350391370140260][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:55:15][350391370140260][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:15][350391370140260][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:55:15][350391370140260][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:55:15][350391370140260][412 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:55:15][350391370140260][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6885\"}'\'' -e'"" [2025-08-23 19:55:15][350391370140260][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:55:15][350391370140260][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391370140260\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6885\"}'\'' -e'"" [2025-08-23 19:55:19][350391370140260][3895 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:55:19][350391370140260][4051 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-23 19:55:19][350391370140260][4051 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-23 19:55:19][350391370140260][4051 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:55:19][][0 ms][INFO] === Request start === [2025-08-23 19:55:19][][1 ms][DEBUG] START check_scloud [2025-08-23 19:55:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:55:20][][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 9875 5012 24843580 145168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:55:20][][320 ms][DEBUG] targetPkg: running [2025-08-23 19:55:20][][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 19:55:20][][320 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:20][][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:20][][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:55:20][][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:20][][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:55:20][][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:55:20][][429 ms][DEBUG] rawBody.length=1129 [2025-08-23 19:55:20][][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92AC63Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1679\"}'\'' -e'"" [2025-08-23 19:55:20][][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:55:20][][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92AC63Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1679\"}'\'' -e'"" [2025-08-23 19:55:23][][3834 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 19:55:23][][3990 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-23 19:55:23][][3990 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-23 19:55:23][][3990 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 19:55:26][357980448148967][0 ms][INFO] === Request start === [2025-08-23 19:55:26][357980448148967][1 ms][DEBUG] START check_scloud [2025-08-23 19:55:26][357980448148967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:55:26][357980448148967][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 9875 5012 24998432 155976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:55:26][357980448148967][320 ms][DEBUG] targetPkg: running [2025-08-23 19:55:26][357980448148967][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 19:55:26][357980448148967][320 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:26][357980448148967][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:26][357980448148967][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:55:26][357980448148967][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:26][357980448148967][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:55:26][357980448148967][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:55:26][357980448148967][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:55:26][357980448148967][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4840\"}'\'' -e'"" [2025-08-23 19:55:26][357980448148967][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:55:26][357980448148967][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4840\"}'\'' -e'"" [2025-08-23 19:55:30][357980448148967][4787 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 19:55:30][357980448148967][4787 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 19:55:30][357980448148967][4787 ms][WARN] Detected error: Process with pid 9875 either refused to load frida-agent, or terminated during injection [2025-08-23 19:55:30][357980448148967][4787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 19:55:31][357980448148967][4928 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 19:55:31][357980448148967][4928 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 19:55:31][357980448148967][4928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 19:55:31][357980448148967][5068 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 19:55:31][357980448148967][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 19:55:31][357980448148967][5224 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 19:55:33][357980448148967][7239 ms][DEBUG] START check_boot_completed [2025-08-23 19:55:33][357980448148967][7240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:55:33][357980448148967][7286 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:55:33][357980448148967][7286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:55:33][357980448148967][7333 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:55:33][357980448148967][7333 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:55:36][357980448148967][10348 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 19:55:36][357980448148967][10348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4840\"}'\'' -e'"" [2025-08-23 19:55:41][357980448148967][15519 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bcf1d82-7fe3-4ac7-8526-3c29a6a09986","id":"QR_0bcf1d82-7fe3-4ac7-8526-3c29a6a09986","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:55:41][357980448148967][15675 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-23 19:55:41][357980448148967][15675 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-08-23 19:55:41][357980448148967][15675 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:56:02][352736910648206][1 ms][INFO] === Request start === [2025-08-23 19:56:02][352736910648206][1 ms][DEBUG] START check_scloud [2025-08-23 19:56:02][352736910648206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:56:02][352736910648206][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 18024 5012 23650928 127136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:56:02][352736910648206][290 ms][DEBUG] targetPkg: running [2025-08-23 19:56:02][352736910648206][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-23 19:56:02][352736910648206][290 ms][DEBUG] START check_boot_completed [2025-08-23 19:56:02][352736910648206][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:56:02][352736910648206][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:56:02][352736910648206][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:56:02][352736910648206][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:56:02][352736910648206][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:56:02][352736910648206][399 ms][DEBUG] START check_internet [2025-08-23 19:56:02][352736910648206][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.935/201.935/201.935/0.000 ms\n [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] check_internet: online [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] END check_internet in 516 ms [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:56:03][352736910648206][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910648206\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7956\"}'\'' -e'"" [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:56:03][352736910648206][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910648206\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7956\"}'\'' -e'"" [2025-08-23 19:56:07][352736910648206][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32d22fc5-e848-4a3a-9f6c-141dca9f1307","id":"QR_32d22fc5-e848-4a3a-9f6c-141dca9f1307","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:56:07][352736910648206][5007 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-23 19:56:07][352736910648206][5007 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-23 19:56:07][352736910648206][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:56:10][352226310356436][0 ms][INFO] === Request start === [2025-08-23 19:56:10][352226310356436][1 ms][DEBUG] START check_scloud [2025-08-23 19:56:10][352226310356436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:56:10][352226310356436][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 18024 5012 23816952 137848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:56:10][352226310356436][319 ms][DEBUG] targetPkg: running [2025-08-23 19:56:10][352226310356436][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 19:56:10][352226310356436][319 ms][DEBUG] START check_boot_completed [2025-08-23 19:56:10][352226310356436][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:56:10][352226310356436][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:56:10][352226310356436][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:56:10][352226310356436][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 19:56:10][352226310356436][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 19:56:10][352226310356436][428 ms][DEBUG] START check_internet [2025-08-23 19:56:10][352226310356436][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:56:11][352226310356436][756 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.812/214.812/214.812/0.000 ms\n [2025-08-23 19:56:11][352226310356436][756 ms][DEBUG] check_internet: online [2025-08-23 19:56:11][352226310356436][756 ms][DEBUG] END check_internet in 328 ms [2025-08-23 19:56:11][352226310356436][756 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:56:11][352226310356436][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352226310356436\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2609\"}'\'' -e'"" [2025-08-23 19:56:11][352226310356436][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:56:11][352226310356436][757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352226310356436\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2609\"}'\'' -e'"" [2025-08-23 19:56:15][352226310356436][5598 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed503b2-370a-422a-a9bf-e85509280282","id":"QR_5ed503b2-370a-422a-a9bf-e85509280282","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:56:16][352226310356436][5755 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-23 19:56:16][352226310356436][5755 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-23 19:56:16][352226310356436][5755 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:56:21][359797451126286][0 ms][INFO] === Request start === [2025-08-23 19:56:21][359797451126286][1 ms][DEBUG] START check_scloud [2025-08-23 19:56:21][359797451126286][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:56:22][359797451126286][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18024 5012 23959608 149476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:56:22][359797451126286][312 ms][DEBUG] targetPkg: running [2025-08-23 19:56:22][359797451126286][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 19:56:22][359797451126286][312 ms][DEBUG] START check_boot_completed [2025-08-23 19:56:22][359797451126286][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:56:22][359797451126286][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:56:22][359797451126286][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:56:22][359797451126286][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:56:22][359797451126286][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:56:22][359797451126286][406 ms][DEBUG] START check_internet [2025-08-23 19:56:22][359797451126286][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:56:22][359797451126286][671 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.621/161.621/161.621/0.000 ms\n [2025-08-23 19:56:22][359797451126286][671 ms][DEBUG] check_internet: online [2025-08-23 19:56:22][359797451126286][671 ms][DEBUG] END check_internet in 266 ms [2025-08-23 19:56:22][359797451126286][671 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:56:22][359797451126286][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451126286\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9578\"}'\'' -e'"" [2025-08-23 19:56:22][359797451126286][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:56:22][359797451126286][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451126286\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9578\"}'\'' -e'"" [2025-08-23 19:56:28][359797451126286][6545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c5ac859-49e3-42d0-8684-4c884d94a992","id":"QR_3c5ac859-49e3-42d0-8684-4c884d94a992","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:56:28][359797451126286][6701 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-23 19:56:28][359797451126286][6701 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-23 19:56:28][359797451126286][6701 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:56:33][353243887445194][0 ms][INFO] === Request start === [2025-08-23 19:56:33][353243887445194][1 ms][DEBUG] START check_scloud [2025-08-23 19:56:33][353243887445194][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:56:34][353243887445194][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18024 5012 24103992 160148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:56:34][353243887445194][307 ms][DEBUG] targetPkg: running [2025-08-23 19:56:34][353243887445194][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 19:56:34][353243887445194][307 ms][DEBUG] START check_boot_completed [2025-08-23 19:56:34][353243887445194][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:56:34][353243887445194][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:56:34][353243887445194][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:56:34][353243887445194][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:56:34][353243887445194][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 19:56:34][353243887445194][401 ms][DEBUG] START check_internet [2025-08-23 19:56:34][353243887445194][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.625/184.625/184.625/0.000 ms\n [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] check_internet: online [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] END check_internet in 281 ms [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:56:34][353243887445194][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887445194\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:56:34][353243887445194][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887445194\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-08-23 19:56:38][353243887445194][4775 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c09e88e-00b1-4dcc-b943-6f95d0844430","id":"QR_5c09e88e-00b1-4dcc-b943-6f95d0844430","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:56:38][353243887445194][4931 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-23 19:56:38][353243887445194][4931 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-23 19:56:38][353243887445194][4931 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:57:03][350725120816556][0 ms][INFO] === Request start === [2025-08-23 19:57:03][350725120816556][1 ms][DEBUG] START check_scloud [2025-08-23 19:57:03][350725120816556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:57:03][350725120816556][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18024 5012 24215800 172164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:57:03][350725120816556][317 ms][DEBUG] targetPkg: running [2025-08-23 19:57:03][350725120816556][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-23 19:57:03][350725120816556][317 ms][DEBUG] START check_boot_completed [2025-08-23 19:57:03][350725120816556][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:57:03][350725120816556][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:57:03][350725120816556][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:57:03][350725120816556][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:57:03][350725120816556][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:57:03][350725120816556][411 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:57:03][350725120816556][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350725120816556\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4888\"}'\'' -e'"" [2025-08-23 19:57:03][350725120816556][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:57:03][350725120816556][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350725120816556\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4888\"}'\'' -e'"" [2025-08-23 19:57:07][350725120816556][4269 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47907753-e8e7-4da8-8ca4-4a7718165c98","id":"QR_47907753-e8e7-4da8-8ca4-4a7718165c98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:57:07][350725120816556][4425 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-23 19:57:07][350725120816556][4425 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-23 19:57:07][350725120816556][4425 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:57:11][353029495328561][0 ms][INFO] === Request start === [2025-08-23 19:57:11][353029495328561][0 ms][DEBUG] START check_scloud [2025-08-23 19:57:11][353029495328561][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:57:12][353029495328561][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 18024 5012 24354304 184612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:57:12][353029495328561][300 ms][DEBUG] targetPkg: running [2025-08-23 19:57:12][353029495328561][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 19:57:12][353029495328561][301 ms][DEBUG] START check_boot_completed [2025-08-23 19:57:12][353029495328561][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:57:12][353029495328561][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 19:57:12][353029495328561][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:57:12][353029495328561][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 19:57:12][353029495328561][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 19:57:12][353029495328561][379 ms][DEBUG] rawBody.length=1149 [2025-08-23 19:57:12][353029495328561][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495328561\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7001\"}'\'' -e'"" [2025-08-23 19:57:12][353029495328561][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:57:12][353029495328561][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495328561\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7001\"}'\'' -e'"" [2025-08-23 19:57:18][353029495328561][6986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f65ddf16-1646-479a-81cf-18d52d1bdb24","id":"QR_f65ddf16-1646-479a-81cf-18d52d1bdb24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:57:18][353029495328561][7143 ms][DEBUG] proc_open done in 6764 ms; code=255; res.len=3343 [2025-08-23 19:57:18][353029495328561][7143 ms][DEBUG] END runCmdUntilRes#1 in 6764 ms [2025-08-23 19:57:18][353029495328561][7143 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:58:03][353948921523646][1 ms][INFO] === Request start === [2025-08-23 19:58:03][353948921523646][1 ms][DEBUG] START check_scloud [2025-08-23 19:58:03][353948921523646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:58:03][353948921523646][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18024 5012 24468112 196452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:58:03][353948921523646][303 ms][DEBUG] targetPkg: running [2025-08-23 19:58:03][353948921523646][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 19:58:03][353948921523646][304 ms][DEBUG] START check_boot_completed [2025-08-23 19:58:03][353948921523646][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:58:03][353948921523646][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:58:03][353948921523646][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:58:03][353948921523646][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 19:58:03][353948921523646][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 19:58:03][353948921523646][398 ms][DEBUG] START check_internet [2025-08-23 19:58:03][353948921523646][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.588/181.588/181.588/0.000 ms\n [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] check_internet: online [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] END check_internet in 296 ms [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:58:04][353948921523646][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921523646\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2349\"}'\'' -e'"" [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:58:04][353948921523646][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921523646\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2349\"}'\'' -e'"" [2025-08-23 19:58:08][353948921523646][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2245aae5-67e5-4f72-a972-c1673fb10b48","id":"QR_2245aae5-67e5-4f72-a972-c1673fb10b48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:58:08][353948921523646][5005 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-23 19:58:08][353948921523646][5005 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-23 19:58:08][353948921523646][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:58:09][350347641967931][0 ms][INFO] === Request start === [2025-08-23 19:58:09][350347641967931][0 ms][DEBUG] START check_scloud [2025-08-23 19:58:09][350347641967931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:58:10][350347641967931][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 18024 5012 24635288 208504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:58:10][350347641967931][262 ms][DEBUG] targetPkg: running [2025-08-23 19:58:10][350347641967931][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 19:58:10][350347641967931][262 ms][DEBUG] START check_boot_completed [2025-08-23 19:58:10][350347641967931][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:58:10][350347641967931][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 19:58:10][350347641967931][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:58:10][350347641967931][402 ms][DEBUG] SU: done in 93 ms; out [2025-08-23 19:58:10][350347641967931][402 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 19:58:10][350347641967931][402 ms][DEBUG] START check_internet [2025-08-23 19:58:10][350347641967931][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.871/168.871/168.871/0.000 ms\n [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] check_internet: online [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] END check_internet in 281 ms [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:58:10][350347641967931][684 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347641967931\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4859\"}'\'' -e'"" [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:58:10][350347641967931][684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347641967931\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4859\"}'\'' -e'"" [2025-08-23 19:58:14][350347641967931][4386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39f32fe9-8056-42cd-9f36-c5362519cd8a","id":"QR_39f32fe9-8056-42cd-9f36-c5362519cd8a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:58:14][350347641967931][4542 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 19:58:14][350347641967931][4542 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 19:58:14][350347641967931][4542 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 19:58:15][354916447160481][0 ms][INFO] === Request start === [2025-08-23 19:58:15][354916447160481][1 ms][DEBUG] START check_scloud [2025-08-23 19:58:15][354916447160481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 19:58:16][354916447160481][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18024 5012 24815320 220284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 19:58:16][354916447160481][307 ms][DEBUG] targetPkg: running [2025-08-23 19:58:16][354916447160481][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-23 19:58:16][354916447160481][307 ms][DEBUG] START check_boot_completed [2025-08-23 19:58:16][354916447160481][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 19:58:16][354916447160481][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 19:58:16][354916447160481][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 19:58:16][354916447160481][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 19:58:16][354916447160481][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 19:58:16][354916447160481][403 ms][DEBUG] START check_internet [2025-08-23 19:58:16][354916447160481][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 19:58:16][354916447160481][666 ms][DEBUG] SU: done in 263 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.771/156.771/156.771/0.000 ms\n [2025-08-23 19:58:16][354916447160481][666 ms][DEBUG] check_internet: online [2025-08-23 19:58:16][354916447160481][666 ms][DEBUG] END check_internet in 264 ms [2025-08-23 19:58:16][354916447160481][666 ms][DEBUG] rawBody.length=1148 [2025-08-23 19:58:16][354916447160481][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447160481\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-08-23 19:58:16][354916447160481][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 19:58:16][354916447160481][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447160481\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-08-23 19:58:20][354916447160481][4431 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e863ab50-2f42-4d75-b46b-3d61d53303bc","id":"QR_e863ab50-2f42-4d75-b46b-3d61d53303bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 19:58:20][354916447160481][4587 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-23 19:58:20][354916447160481][4587 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-23 19:58:20][354916447160481][4587 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:01:05][350896382666862][1 ms][INFO] === Request start === [2025-08-23 20:01:05][350896382666862][1 ms][DEBUG] START check_scloud [2025-08-23 20:01:05][350896382666862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:01:06][350896382666862][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18024 5012 24962836 229492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:01:06][350896382666862][308 ms][DEBUG] targetPkg: running [2025-08-23 20:01:06][350896382666862][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 20:01:06][350896382666862][309 ms][DEBUG] START check_boot_completed [2025-08-23 20:01:06][350896382666862][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:01:06][350896382666862][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:01:06][350896382666862][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:01:06][350896382666862][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 20:01:06][350896382666862][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:01:06][350896382666862][418 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:01:06][350896382666862][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382666862\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6571\"}'\'' -e'"" [2025-08-23 20:01:06][350896382666862][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:01:06][350896382666862][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382666862\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6571\"}'\'' -e'"" [2025-08-23 20:01:13][350896382666862][7431 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7190f41-98ac-4fd5-b179-0edf1826cb3f","id":"QR_d7190f41-98ac-4fd5-b179-0edf1826cb3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:01:13][350896382666862][7588 ms][DEBUG] proc_open done in 7170 ms; code=255; res.len=3343 [2025-08-23 20:01:13][350896382666862][7588 ms][DEBUG] END runCmdUntilRes#1 in 7170 ms [2025-08-23 20:01:13][350896382666862][7588 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:01:18][352208775823654][0 ms][INFO] === Request start === [2025-08-23 20:01:18][352208775823654][1 ms][DEBUG] START check_scloud [2025-08-23 20:01:18][352208775823654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:01:18][352208775823654][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18024 5012 25142300 240588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:01:18][352208775823654][315 ms][DEBUG] targetPkg: running [2025-08-23 20:01:18][352208775823654][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 20:01:18][352208775823654][315 ms][DEBUG] START check_boot_completed [2025-08-23 20:01:18][352208775823654][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:01:18][352208775823654][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:01:18][352208775823654][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:01:18][352208775823654][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:01:18][352208775823654][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:01:18][352208775823654][409 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:01:18][352208775823654][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-08-23 20:01:18][352208775823654][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:01:18][352208775823654][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-08-23 20:01:22][352208775823654][4330 ms][DEBUG] proc_open done in 3921 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 20:01:22][352208775823654][4330 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-23 20:01:22][352208775823654][4330 ms][WARN] Detected error: Process with pid 18024 either refused to load frida-agent, or terminated during injection [2025-08-23 20:01:22][352208775823654][4330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 20:01:22][352208775823654][4486 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 20:01:22][352208775823654][4486 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 20:01:22][352208775823654][4486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 20:01:23][352208775823654][4611 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 20:01:23][352208775823654][4611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 20:01:23][352208775823654][4767 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 20:01:25][352208775823654][6782 ms][DEBUG] START check_boot_completed [2025-08-23 20:01:25][352208775823654][6782 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:01:25][352208775823654][6829 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:01:25][352208775823654][6829 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:01:25][352208775823654][6907 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 20:01:25][352208775823654][6907 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 20:01:28][352208775823654][9922 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 20:01:28][352208775823654][9922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-08-23 20:01:32][352208775823654][14218 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_435c4d28-2cbf-4a5e-8cd4-6bebd01542ce","id":"QR_435c4d28-2cbf-4a5e-8cd4-6bebd01542ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:01:32][352208775823654][14374 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-23 20:01:32][352208775823654][14374 ms][DEBUG] END runCmdUntilRes#2 in 4452 ms [2025-08-23 20:01:32][352208775823654][14374 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:04:05][356257543705764][1 ms][INFO] === Request start === [2025-08-23 20:04:05][356257543705764][1 ms][DEBUG] START check_scloud [2025-08-23 20:04:05][356257543705764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:04:05][356257543705764][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19432 5012 23569988 126856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:04:05][356257543705764][312 ms][DEBUG] targetPkg: running [2025-08-23 20:04:05][356257543705764][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 20:04:05][356257543705764][312 ms][DEBUG] START check_boot_completed [2025-08-23 20:04:05][356257543705764][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:04:05][356257543705764][375 ms][DEBUG] ADB: done in 62 ms; out [2025-08-23 20:04:05][356257543705764][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:04:05][356257543705764][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:04:05][356257543705764][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:04:05][356257543705764][422 ms][DEBUG] START check_internet [2025-08-23 20:04:05][356257543705764][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.803/200.803/200.803/0.000 ms\n [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] check_internet: online [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] END check_internet in 437 ms [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:04:06][356257543705764][859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257543705764\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7168\"}'\'' -e'"" [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:04:06][356257543705764][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257543705764\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7168\"}'\'' -e'"" [2025-08-23 20:04:11][356257543705764][6217 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f14faea5-4290-435d-bec8-b44bc9ceda68","id":"QR_f14faea5-4290-435d-bec8-b44bc9ceda68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:04:11][356257543705764][6373 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 20:04:11][356257543705764][6373 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 20:04:11][356257543705764][6373 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:08:03][350832441974393][1 ms][INFO] === Request start === [2025-08-23 20:08:03][350832441974393][1 ms][DEBUG] START check_scloud [2025-08-23 20:08:03][350832441974393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:08:03][350832441974393][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 19432 5012 23765728 138028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:08:03][350832441974393][253 ms][DEBUG] targetPkg: running [2025-08-23 20:08:03][350832441974393][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-23 20:08:03][350832441974393][253 ms][DEBUG] START check_boot_completed [2025-08-23 20:08:03][350832441974393][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:08:04][350832441974393][284 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:08:04][350832441974393][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:08:04][350832441974393][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:08:04][350832441974393][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 20:08:04][350832441974393][332 ms][DEBUG] START check_internet [2025-08-23 20:08:04][350832441974393][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.231/201.231/201.231/0.000 ms\n [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] check_internet: online [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] END check_internet in 531 ms [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:08:04][350832441974393][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441974393\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6716\"}'\'' -e'"" [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:08:04][350832441974393][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441974393\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6716\"}'\'' -e'"" [2025-08-23 20:08:09][350832441974393][5314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b907c6b-cc06-429c-85be-59c28d916828","id":"QR_9b907c6b-cc06-429c-85be-59c28d916828","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:08:09][350832441974393][5471 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-08-23 20:08:09][350832441974393][5471 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-23 20:08:09][350832441974393][5471 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:21:03][352539599402766][1 ms][INFO] === Request start === [2025-08-23 20:21:03][352539599402766][1 ms][DEBUG] START check_scloud [2025-08-23 20:21:03][352539599402766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:21:04][352539599402766][332 ms][DEBUG] SU: done in 330 ms; outu0_a118 19432 5012 23873432 114772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:21:04][352539599402766][332 ms][DEBUG] targetPkg: running [2025-08-23 20:21:04][352539599402766][332 ms][DEBUG] END check_scloud in 331 ms [2025-08-23 20:21:04][352539599402766][332 ms][DEBUG] START check_boot_completed [2025-08-23 20:21:04][352539599402766][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:21:04][352539599402766][378 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:21:04][352539599402766][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:21:04][352539599402766][425 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:21:04][352539599402766][425 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:21:04][352539599402766][425 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:21:04][352539599402766][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599402766\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4931\"}'\'' -e'"" [2025-08-23 20:21:04][352539599402766][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:21:04][352539599402766][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599402766\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4931\"}'\'' -e'"" [2025-08-23 20:21:09][352539599402766][5065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31c9e32e-dd57-4ab9-8670-f13858fb7bc8","id":"QR_31c9e32e-dd57-4ab9-8670-f13858fb7bc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:21:09][352539599402766][5221 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-08-23 20:21:09][352539599402766][5221 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-23 20:21:09][352539599402766][5221 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:29:03][350616255444936][1 ms][INFO] === Request start === [2025-08-23 20:29:03][350616255444936][1 ms][DEBUG] START check_scloud [2025-08-23 20:29:03][350616255444936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:29:03][350616255444936][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19432 5012 23993468 126124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:29:03][350616255444936][319 ms][DEBUG] targetPkg: running [2025-08-23 20:29:03][350616255444936][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 20:29:03][350616255444936][319 ms][DEBUG] START check_boot_completed [2025-08-23 20:29:03][350616255444936][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:29:03][350616255444936][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:29:03][350616255444936][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:29:03][350616255444936][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 20:29:03][350616255444936][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:29:03][350616255444936][428 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:29:03][350616255444936][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255444936\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3577\"}'\'' -e'"" [2025-08-23 20:29:03][350616255444936][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:29:03][350616255444936][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255444936\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3577\"}'\'' -e'"" [2025-08-23 20:29:08][350616255444936][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c50bf58c-5148-4d4d-afba-632c40ed09ab","id":"QR_c50bf58c-5148-4d4d-afba-632c40ed09ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:29:08][350616255444936][5005 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-23 20:29:08][350616255444936][5005 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-23 20:29:08][350616255444936][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:33:04][357873771828703][1 ms][INFO] === Request start === [2025-08-23 20:33:04][357873771828703][1 ms][DEBUG] START check_scloud [2025-08-23 20:33:04][357873771828703][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:33:05][357873771828703][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19432 5012 24169388 134088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:33:05][357873771828703][315 ms][DEBUG] targetPkg: running [2025-08-23 20:33:05][357873771828703][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 20:33:05][357873771828703][315 ms][DEBUG] START check_boot_completed [2025-08-23 20:33:05][357873771828703][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:33:05][357873771828703][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:33:05][357873771828703][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:33:05][357873771828703][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 20:33:05][357873771828703][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:33:05][357873771828703][425 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:33:05][357873771828703][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873771828703\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7722\"}'\'' -e'"" [2025-08-23 20:33:05][357873771828703][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:33:05][357873771828703][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873771828703\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7722\"}'\'' -e'"" [2025-08-23 20:33:12][357873771828703][7876 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e01e9b1d-7ca9-4fa3-851f-b50e757a796d","id":"QR_e01e9b1d-7ca9-4fa3-851f-b50e757a796d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:33:12][357873771828703][8032 ms][DEBUG] proc_open done in 7607 ms; code=255; res.len=3343 [2025-08-23 20:33:12][357873771828703][8032 ms][DEBUG] END runCmdUntilRes#1 in 7607 ms [2025-08-23 20:33:12][357873771828703][8032 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:34:03][350616259470267][1 ms][INFO] === Request start === [2025-08-23 20:34:03][350616259470267][1 ms][DEBUG] START check_scloud [2025-08-23 20:34:03][350616259470267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:34:03][350616259470267][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 19432 5012 24297424 143768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:34:03][350616259470267][318 ms][DEBUG] targetPkg: running [2025-08-23 20:34:03][350616259470267][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 20:34:03][350616259470267][318 ms][DEBUG] START check_boot_completed [2025-08-23 20:34:03][350616259470267][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:34:03][350616259470267][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:34:03][350616259470267][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:34:03][350616259470267][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:34:03][350616259470267][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:34:03][350616259470267][411 ms][DEBUG] START check_internet [2025-08-23 20:34:03][350616259470267][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:34:04][350616259470267][880 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.397/199.397/199.397/0.000 ms\n [2025-08-23 20:34:04][350616259470267][880 ms][DEBUG] check_internet: online [2025-08-23 20:34:04][350616259470267][880 ms][DEBUG] END check_internet in 469 ms [2025-08-23 20:34:04][350616259470267][880 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:34:04][350616259470267][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259470267\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-08-23 20:34:04][350616259470267][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:34:04][350616259470267][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259470267\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-08-23 20:34:08][350616259470267][5004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b340876-bdc3-4424-a3a8-f16b3f26a3bc","id":"QR_5b340876-bdc3-4424-a3a8-f16b3f26a3bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:34:08][350616259470267][5160 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-23 20:34:08][350616259470267][5160 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-23 20:34:08][350616259470267][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:34:12][350455580298182][0 ms][INFO] === Request start === [2025-08-23 20:34:12][350455580298182][1 ms][DEBUG] START check_scloud [2025-08-23 20:34:12][350455580298182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:34:12][350455580298182][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 19432 5012 24448088 155668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:34:12][350455580298182][268 ms][DEBUG] targetPkg: running [2025-08-23 20:34:12][350455580298182][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-23 20:34:12][350455580298182][268 ms][DEBUG] START check_boot_completed [2025-08-23 20:34:12][350455580298182][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:34:12][350455580298182][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:34:12][350455580298182][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:34:12][350455580298182][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:34:12][350455580298182][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:34:12][350455580298182][361 ms][DEBUG] START check_internet [2025-08-23 20:34:12][350455580298182][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.818/199.818/199.818/0.000 ms\n [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] check_internet: online [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] END check_internet in 313 ms [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:34:12][350455580298182][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580298182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3304\"}'\'' -e'"" [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:34:12][350455580298182][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580298182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3304\"}'\'' -e'"" [2025-08-23 20:34:20][350455580298182][8078 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9fcca00-b428-4148-b76d-d0eec7970ed5","id":"QR_d9fcca00-b428-4148-b76d-d0eec7970ed5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:34:20][350455580298182][8234 ms][DEBUG] proc_open done in 7560 ms; code=255; res.len=3343 [2025-08-23 20:34:20][350455580298182][8234 ms][DEBUG] END runCmdUntilRes#1 in 7560 ms [2025-08-23 20:34:20][350455580298182][8234 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:35:03][353459964004072][0 ms][INFO] === Request start === [2025-08-23 20:35:03][353459964004072][1 ms][DEBUG] START check_scloud [2025-08-23 20:35:03][353459964004072][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:35:03][353459964004072][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 19432 5012 24545432 156232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:35:03][353459964004072][281 ms][DEBUG] targetPkg: running [2025-08-23 20:35:03][353459964004072][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-23 20:35:03][353459964004072][281 ms][DEBUG] START check_boot_completed [2025-08-23 20:35:03][353459964004072][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:35:03][353459964004072][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:35:03][353459964004072][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:35:03][353459964004072][376 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 20:35:03][353459964004072][376 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 20:35:03][353459964004072][376 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:35:03][353459964004072][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459964004072\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1145\"}'\'' -e'"" [2025-08-23 20:35:03][353459964004072][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:35:03][353459964004072][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459964004072\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1145\"}'\'' -e'"" [2025-08-23 20:35:10][353459964004072][6920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dd1050d-a7ff-47c3-94ac-4b19ad1ef5d9","id":"QR_9dd1050d-a7ff-47c3-94ac-4b19ad1ef5d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:35:10][353459964004072][7076 ms][DEBUG] proc_open done in 6699 ms; code=255; res.len=3343 [2025-08-23 20:35:10][353459964004072][7076 ms][DEBUG] END runCmdUntilRes#1 in 6700 ms [2025-08-23 20:35:10][353459964004072][7076 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:37:03][352053264003487][1 ms][INFO] === Request start === [2025-08-23 20:37:03][352053264003487][1 ms][DEBUG] START check_scloud [2025-08-23 20:37:03][352053264003487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:37:03][352053264003487][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19432 5012 24703164 164868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:37:03][352053264003487][311 ms][DEBUG] targetPkg: running [2025-08-23 20:37:03][352053264003487][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 20:37:03][352053264003487][311 ms][DEBUG] START check_boot_completed [2025-08-23 20:37:03][352053264003487][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:37:03][352053264003487][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:37:03][352053264003487][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:37:03][352053264003487][407 ms][DEBUG] SU: done in 49 ms; out [2025-08-23 20:37:03][352053264003487][407 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-23 20:37:03][352053264003487][407 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:37:03][352053264003487][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2470\"}'\'' -e'"" [2025-08-23 20:37:03][352053264003487][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:37:03][352053264003487][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264003487\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2470\"}'\'' -e'"" [2025-08-23 20:37:09][352053264003487][6513 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 20:37:09][352053264003487][6669 ms][DEBUG] proc_open done in 6262 ms; code=255; res.len=107 [2025-08-23 20:37:09][352053264003487][6669 ms][DEBUG] END runCmdUntilRes#1 in 6262 ms [2025-08-23 20:37:09][352053264003487][6669 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 20:37:10][][0 ms][INFO] === Request start === [2025-08-23 20:37:10][][1 ms][DEBUG] START check_scloud [2025-08-23 20:37:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:37:10][][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 19432 5012 24876356 175124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:37:10][][252 ms][DEBUG] targetPkg: running [2025-08-23 20:37:10][][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-23 20:37:10][][252 ms][DEBUG] START check_boot_completed [2025-08-23 20:37:10][][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:37:10][][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:37:10][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:37:10][][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:37:10][][330 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 20:37:10][][330 ms][DEBUG] rawBody.length=1130 [2025-08-23 20:37:10][][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50R897P\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-23 20:37:10][][331 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:37:10][][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50R897P\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-23 20:37:14][][4704 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 20:37:15][][4860 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=107 [2025-08-23 20:37:15][][4860 ms][DEBUG] END runCmdUntilRes#1 in 4529 ms [2025-08-23 20:37:15][][4860 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 20:42:01][352350275228065][1 ms][INFO] === Request start === [2025-08-23 20:42:01][352350275228065][1 ms][DEBUG] START check_scloud [2025-08-23 20:42:01][352350275228065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:42:02][352350275228065][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19432 5012 25004424 186064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:42:02][352350275228065][308 ms][DEBUG] targetPkg: running [2025-08-23 20:42:02][352350275228065][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 20:42:02][352350275228065][308 ms][DEBUG] START check_boot_completed [2025-08-23 20:42:02][352350275228065][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:42:02][352350275228065][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:42:02][352350275228065][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:42:02][352350275228065][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:42:02][352350275228065][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:42:02][352350275228065][401 ms][DEBUG] START check_internet [2025-08-23 20:42:02][352350275228065][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] SU: done in 470 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.485/201.485/201.485/0.000 ms\n [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] check_internet: online [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] END check_internet in 471 ms [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:42:02][352350275228065][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228065\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3551\"}'\'' -e'"" [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:42:02][352350275228065][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228065\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3551\"}'\'' -e'"" [2025-08-23 20:42:07][352350275228065][5010 ms][DEBUG] proc_open done in 4138 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 20:42:07][352350275228065][5010 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-08-23 20:42:07][352350275228065][5010 ms][WARN] Detected error: Process with pid 19432 either refused to load frida-agent, or terminated during injection [2025-08-23 20:42:07][352350275228065][5010 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 20:42:07][352350275228065][5150 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 20:42:07][352350275228065][5150 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 20:42:07][352350275228065][5151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 20:42:07][352350275228065][5275 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 20:42:07][352350275228065][5275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 20:42:07][352350275228065][5478 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 20:42:09][352350275228065][7493 ms][DEBUG] START check_boot_completed [2025-08-23 20:42:09][352350275228065][7493 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:42:09][352350275228065][7525 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:42:09][352350275228065][7525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:42:09][352350275228065][7572 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:42:09][352350275228065][7572 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-23 20:42:12][352350275228065][10586 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 20:42:12][352350275228065][10587 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275228065\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3551\"}'\'' -e'"" [2025-08-23 20:42:16][352350275228065][14523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7663172-4913-462c-a4f7-6c3be72712da","id":"QR_f7663172-4913-462c-a4f7-6c3be72712da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:42:16][352350275228065][14679 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-23 20:42:16][352350275228065][14679 ms][DEBUG] END runCmdUntilRes#2 in 4093 ms [2025-08-23 20:42:16][352350275228065][14679 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:44:06][353842199005297][1 ms][INFO] === Request start === [2025-08-23 20:44:06][353842199005297][1 ms][DEBUG] START check_scloud [2025-08-23 20:44:06][353842199005297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:44:06][353842199005297][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 23117 5012 23573880 126876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:44:06][353842199005297][262 ms][DEBUG] targetPkg: running [2025-08-23 20:44:06][353842199005297][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-23 20:44:06][353842199005297][262 ms][DEBUG] START check_boot_completed [2025-08-23 20:44:06][353842199005297][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:44:06][353842199005297][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:44:06][353842199005297][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:44:06][353842199005297][371 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 20:44:06][353842199005297][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:44:06][353842199005297][371 ms][DEBUG] START check_internet [2025-08-23 20:44:06][353842199005297][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.303/275.303/275.303/0.000 ms\n [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] check_internet: online [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] END check_internet in 422 ms [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] rawBody.length=1159 [2025-08-23 20:44:06][353842199005297][793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842199005297\",\"model\":\"SM-X610\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52Y1033HPY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5086\"}'\'' -e'"" [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:44:06][353842199005297][793 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842199005297\",\"model\":\"SM-X610\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52Y1033HPY\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5086\"}'\'' -e'"" [2025-08-23 20:44:13][353842199005297][7697 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fb82ef8-42a7-4ec4-9332-38033a471bd4","id":"QR_4fb82ef8-42a7-4ec4-9332-38033a471bd4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:44:14][353842199005297][7853 ms][DEBUG] proc_open done in 7061 ms; code=255; res.len=3343 [2025-08-23 20:44:14][353842199005297][7853 ms][DEBUG] END runCmdUntilRes#1 in 7061 ms [2025-08-23 20:44:14][353842199005297][7853 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:45:03][351736904029349][0 ms][INFO] === Request start === [2025-08-23 20:45:03][351736904029349][1 ms][DEBUG] START check_scloud [2025-08-23 20:45:03][351736904029349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:45:04][351736904029349][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 23117 5012 23665160 138124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:45:04][351736904029349][324 ms][DEBUG] targetPkg: running [2025-08-23 20:45:04][351736904029349][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-23 20:45:04][351736904029349][324 ms][DEBUG] START check_boot_completed [2025-08-23 20:45:04][351736904029349][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:45:04][351736904029349][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:45:04][351736904029349][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:45:04][351736904029349][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:45:04][351736904029349][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 20:45:04][351736904029349][417 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:45:04][351736904029349][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736904029349\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-08-23 20:45:04][351736904029349][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:45:04][351736904029349][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736904029349\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-08-23 20:45:11][351736904029349][7337 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3980934-0464-487f-bd36-48250aa166bd","id":"QR_e3980934-0464-487f-bd36-48250aa166bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:45:11][351736904029349][7494 ms][DEBUG] proc_open done in 7076 ms; code=255; res.len=3343 [2025-08-23 20:45:11][351736904029349][7494 ms][DEBUG] END runCmdUntilRes#1 in 7076 ms [2025-08-23 20:45:11][351736904029349][7494 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:45:15][357967978444809][0 ms][INFO] === Request start === [2025-08-23 20:45:15][357967978444809][1 ms][DEBUG] START check_scloud [2025-08-23 20:45:15][357967978444809][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:45:15][357967978444809][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 23117 5012 23822096 149992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:45:15][357967978444809][305 ms][DEBUG] targetPkg: running [2025-08-23 20:45:15][357967978444809][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 20:45:15][357967978444809][305 ms][DEBUG] START check_boot_completed [2025-08-23 20:45:15][357967978444809][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:45:15][357967978444809][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:45:15][357967978444809][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:45:16][357967978444809][429 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 20:45:16][357967978444809][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 20:45:16][357967978444809][430 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:45:16][357967978444809][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978444809\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-23 20:45:16][357967978444809][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:45:16][357967978444809][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978444809\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-23 20:45:20][357967978444809][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8eba4951-dafe-4950-8a23-835045b0247f","id":"QR_8eba4951-dafe-4950-8a23-835045b0247f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:45:20][357967978444809][4897 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-23 20:45:20][357967978444809][4897 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-23 20:45:20][357967978444809][4897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:46:04][350437733720098][0 ms][INFO] === Request start === [2025-08-23 20:46:04][350437733720098][1 ms][DEBUG] START check_scloud [2025-08-23 20:46:04][350437733720098][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:46:04][350437733720098][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 23117 5012 23984108 161072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:46:04][350437733720098][321 ms][DEBUG] targetPkg: running [2025-08-23 20:46:04][350437733720098][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 20:46:04][350437733720098][321 ms][DEBUG] START check_boot_completed [2025-08-23 20:46:04][350437733720098][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:46:04][350437733720098][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 20:46:04][350437733720098][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:46:04][350437733720098][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:46:04][350437733720098][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 20:46:04][350437733720098][415 ms][DEBUG] START check_internet [2025-08-23 20:46:04][350437733720098][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.886/200.886/200.886/0.000 ms\n [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] check_internet: online [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] END check_internet in 484 ms [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:46:05][350437733720098][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437733720098\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2443\"}'\'' -e'"" [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:46:05][350437733720098][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437733720098\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2443\"}'\'' -e'"" [2025-08-23 20:46:10][350437733720098][6210 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7551fd44-08a1-423c-9cc4-2bc1cd30ba37","id":"QR_7551fd44-08a1-423c-9cc4-2bc1cd30ba37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:46:10][350437733720098][6366 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-23 20:46:10][350437733720098][6366 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-23 20:46:10][350437733720098][6366 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:49:03][354886764564815][1 ms][INFO] === Request start === [2025-08-23 20:49:03][354886764564815][1 ms][DEBUG] START check_scloud [2025-08-23 20:49:03][354886764564815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:49:03][354886764564815][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23117 5012 24146156 172268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:49:03][354886764564815][308 ms][DEBUG] targetPkg: running [2025-08-23 20:49:03][354886764564815][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 20:49:03][354886764564815][308 ms][DEBUG] START check_boot_completed [2025-08-23 20:49:03][354886764564815][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:49:04][354886764564815][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:49:04][354886764564815][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:49:04][354886764564815][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:49:04][354886764564815][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 20:49:04][354886764564815][387 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:49:04][354886764564815][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354886764564815\",\"model\":\"SM-F946U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7284\"}'\'' -e'"" [2025-08-23 20:49:04][354886764564815][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:49:04][354886764564815][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354886764564815\",\"model\":\"SM-F946U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7284\"}'\'' -e'"" [2025-08-23 20:49:09][354886764564815][5619 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8975dd2b-716f-4be8-9ed5-37849e17545b","id":"QR_8975dd2b-716f-4be8-9ed5-37849e17545b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:49:09][354886764564815][5776 ms][DEBUG] proc_open done in 5388 ms; code=255; res.len=3343 [2025-08-23 20:49:09][354886764564815][5776 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-23 20:49:09][354886764564815][5776 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:53:02][352350278469963][1 ms][INFO] === Request start === [2025-08-23 20:53:02][352350278469963][1 ms][DEBUG] START check_scloud [2025-08-23 20:53:02][352350278469963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:53:03][352350278469963][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 23117 5012 24311248 184424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:53:03][352350278469963][303 ms][DEBUG] targetPkg: running [2025-08-23 20:53:03][352350278469963][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 20:53:03][352350278469963][303 ms][DEBUG] START check_boot_completed [2025-08-23 20:53:03][352350278469963][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:53:03][352350278469963][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:53:03][352350278469963][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:53:03][352350278469963][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:53:03][352350278469963][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 20:53:03][352350278469963][382 ms][DEBUG] rawBody.length=1148 [2025-08-23 20:53:03][352350278469963][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278469963\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8315\"}'\'' -e'"" [2025-08-23 20:53:03][352350278469963][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:53:03][352350278469963][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278469963\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8315\"}'\'' -e'"" [2025-08-23 20:53:07][352350278469963][4521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cffcf285-0ea7-4bfa-bd4e-c7e74c90574e","id":"QR_cffcf285-0ea7-4bfa-bd4e-c7e74c90574e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:53:07][352350278469963][4677 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 20:53:07][352350278469963][4677 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 20:53:07][352350278469963][4677 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:56:05][353357976720612][1 ms][INFO] === Request start === [2025-08-23 20:56:05][353357976720612][1 ms][DEBUG] START check_scloud [2025-08-23 20:56:05][353357976720612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:56:05][353357976720612][334 ms][DEBUG] SU: done in 332 ms; outu0_a118 23117 5012 24421044 165044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:56:05][353357976720612][334 ms][DEBUG] targetPkg: running [2025-08-23 20:56:05][353357976720612][334 ms][DEBUG] END check_scloud in 333 ms [2025-08-23 20:56:05][353357976720612][334 ms][DEBUG] START check_boot_completed [2025-08-23 20:56:05][353357976720612][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:56:05][353357976720612][365 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 20:56:05][353357976720612][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:56:05][353357976720612][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 20:56:05][353357976720612][412 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 20:56:05][353357976720612][412 ms][DEBUG] START check_internet [2025-08-23 20:56:05][353357976720612][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.488/200.488/200.488/0.000 ms\n [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] check_internet: online [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] END check_internet in 500 ms [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:56:06][353357976720612][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357976720612\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:56:06][353357976720612][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357976720612\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-23 20:56:11][353357976720612][6770 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4282b2f-2e48-4c23-b35b-7eca36f71f1b","id":"QR_c4282b2f-2e48-4c23-b35b-7eca36f71f1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:56:12][353357976720612][6926 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-08-23 20:56:12][353357976720612][6926 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-23 20:56:12][353357976720612][6926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:58:04][353819352252098][0 ms][INFO] === Request start === [2025-08-23 20:58:04][353819352252098][1 ms][DEBUG] START check_scloud [2025-08-23 20:58:04][353819352252098][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:58:04][353819352252098][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 23117 5012 24582040 139332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:58:04][353819352252098][318 ms][DEBUG] targetPkg: running [2025-08-23 20:58:04][353819352252098][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-23 20:58:04][353819352252098][318 ms][DEBUG] START check_boot_completed [2025-08-23 20:58:04][353819352252098][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:58:04][353819352252098][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:58:04][353819352252098][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:58:04][353819352252098][458 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 20:58:04][353819352252098][459 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 20:58:04][353819352252098][459 ms][DEBUG] START check_internet [2025-08-23 20:58:04][353819352252098][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:58:05][353819352252098][927 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.894/202.894/202.894/0.000 ms\n [2025-08-23 20:58:05][353819352252098][927 ms][DEBUG] check_internet: online [2025-08-23 20:58:05][353819352252098][927 ms][DEBUG] END check_internet in 469 ms [2025-08-23 20:58:05][353819352252098][927 ms][DEBUG] rawBody.length=1158 [2025-08-23 20:58:05][353819352252098][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819352252098\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW70WSHBZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9593\"}'\'' -e'"" [2025-08-23 20:58:05][353819352252098][928 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:58:05][353819352252098][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819352252098\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW70WSHBZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9593\"}'\'' -e'"" [2025-08-23 20:58:09][353819352252098][4957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d3ff72b-a2c9-4fbc-a2a8-a333f3064cfb","id":"QR_7d3ff72b-a2c9-4fbc-a2a8-a333f3064cfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:58:09][353819352252098][5113 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-23 20:58:09][353819352252098][5113 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-23 20:58:09][353819352252098][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 20:58:13][351782255606426][1 ms][INFO] === Request start === [2025-08-23 20:58:13][351782255606426][1 ms][DEBUG] START check_scloud [2025-08-23 20:58:13][351782255606426][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 20:58:13][351782255606426][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 23117 5012 24708128 155936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 20:58:13][351782255606426][316 ms][DEBUG] targetPkg: running [2025-08-23 20:58:13][351782255606426][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 20:58:13][351782255606426][317 ms][DEBUG] START check_boot_completed [2025-08-23 20:58:13][351782255606426][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 20:58:13][351782255606426][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 20:58:13][351782255606426][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 20:58:13][351782255606426][426 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 20:58:13][351782255606426][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 20:58:13][351782255606426][426 ms][DEBUG] START check_internet [2025-08-23 20:58:13][351782255606426][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.622/167.622/167.622/0.000 ms\n [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] check_internet: online [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] END check_internet in 281 ms [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] rawBody.length=1149 [2025-08-23 20:58:14][351782255606426][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782255606426\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 20:58:14][351782255606426][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782255606426\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-23 20:58:20][351782255606426][7096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2abe194d-70f4-45f6-96ac-e6e7a3f7d8ff","id":"QR_2abe194d-70f4-45f6-96ac-e6e7a3f7d8ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 20:58:20][351782255606426][7252 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-08-23 20:58:20][351782255606426][7252 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-08-23 20:58:20][351782255606426][7252 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:01:06][351389783589114][1 ms][INFO] === Request start === [2025-08-23 21:01:06][351389783589114][1 ms][DEBUG] START check_scloud [2025-08-23 21:01:06][351389783589114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:01:06][351389783589114][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 23117 5012 24859904 167496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:01:06][351389783589114][316 ms][DEBUG] targetPkg: running [2025-08-23 21:01:06][351389783589114][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 21:01:06][351389783589114][316 ms][DEBUG] START check_boot_completed [2025-08-23 21:01:06][351389783589114][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:01:06][351389783589114][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:01:06][351389783589114][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:01:06][351389783589114][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:01:06][351389783589114][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:01:06][351389783589114][425 ms][DEBUG] rawBody.length=1159 [2025-08-23 21:01:06][351389783589114][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351389783589114\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T905QFWK\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8156\"}'\'' -e'"" [2025-08-23 21:01:06][351389783589114][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:01:06][351389783589114][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351389783589114\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T905QFWK\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8156\"}'\'' -e'"" [2025-08-23 21:01:12][351389783589114][6158 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb3dc762-5c72-4bc3-a200-3afbbd1b47a5","id":"QR_bb3dc762-5c72-4bc3-a200-3afbbd1b47a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:01:12][351389783589114][6314 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-08-23 21:01:12][351389783589114][6314 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-08-23 21:01:12][351389783589114][6314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:03:04][352467920361453][0 ms][INFO] === Request start === [2025-08-23 21:03:04][352467920361453][1 ms][DEBUG] START check_scloud [2025-08-23 21:03:04][352467920361453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:03:05][352467920361453][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 23117 5012 24993252 177596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:03:05][352467920361453][309 ms][DEBUG] targetPkg: running [2025-08-23 21:03:05][352467920361453][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 21:03:05][352467920361453][309 ms][DEBUG] START check_boot_completed [2025-08-23 21:03:05][352467920361453][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:03:05][352467920361453][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:03:05][352467920361453][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:03:05][352467920361453][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:03:05][352467920361453][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:03:05][352467920361453][419 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:03:05][352467920361453][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467920361453\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-23 21:03:05][352467920361453][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:03:05][352467920361453][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467920361453\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-23 21:03:09][352467920361453][4371 ms][DEBUG] proc_open done in 3951 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 21:03:09][352467920361453][4371 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-23 21:03:09][352467920361453][4371 ms][WARN] Detected error: Process with pid 23117 either refused to load frida-agent, or terminated during injection [2025-08-23 21:03:09][352467920361453][4371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 21:03:09][352467920361453][4511 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 21:03:09][352467920361453][4511 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 21:03:09][352467920361453][4512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 21:03:09][352467920361453][4683 ms][DEBUG] SU: done in 172 ms; out [2025-08-23 21:03:09][352467920361453][4683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 21:03:09][352467920361453][4871 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 21:03:11][352467920361453][6885 ms][DEBUG] START check_boot_completed [2025-08-23 21:03:11][352467920361453][6885 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:03:11][352467920361453][6917 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:03:11][352467920361453][6917 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:03:11][352467920361453][6964 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:03:11][352467920361453][6964 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:03:14][352467920361453][9979 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 21:03:14][352467920361453][9979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467920361453\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-23 21:03:20][352467920361453][15227 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e527a12-7695-4cc3-9b5e-d0d32adc504c","id":"QR_6e527a12-7695-4cc3-9b5e-d0d32adc504c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:03:20][352467920361453][15384 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-08-23 21:03:20][352467920361453][15384 ms][DEBUG] END runCmdUntilRes#2 in 5405 ms [2025-08-23 21:03:20][352467920361453][15384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:05:04][356105112114688][1 ms][INFO] === Request start === [2025-08-23 21:05:04][356105112114688][1 ms][DEBUG] START check_scloud [2025-08-23 21:05:04][356105112114688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:05:05][356105112114688][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 25710 5012 23637356 126508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:05:05][356105112114688][309 ms][DEBUG] targetPkg: running [2025-08-23 21:05:05][356105112114688][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-23 21:05:05][356105112114688][310 ms][DEBUG] START check_boot_completed [2025-08-23 21:05:05][356105112114688][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:05:05][356105112114688][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:05:05][356105112114688][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:05:05][356105112114688][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:05:05][356105112114688][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 21:05:05][356105112114688][404 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:05:05][356105112114688][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105112114688\",\"model\":\"SM-N986W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-08-23 21:05:05][356105112114688][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:05:05][356105112114688][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105112114688\",\"model\":\"SM-N986W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-08-23 21:05:15][356105112114688][11025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87676c82-b93e-4fad-8aa6-7ee4bd6a40b3","id":"QR_87676c82-b93e-4fad-8aa6-7ee4bd6a40b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:05:16][356105112114688][11182 ms][DEBUG] proc_open done in 10777 ms; code=255; res.len=3343 [2025-08-23 21:05:16][356105112114688][11182 ms][DEBUG] END runCmdUntilRes#1 in 10777 ms [2025-08-23 21:05:16][356105112114688][11182 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:09:04][351672490143337][1 ms][INFO] === Request start === [2025-08-23 21:09:04][351672490143337][1 ms][DEBUG] START check_scloud [2025-08-23 21:09:04][351672490143337][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:09:05][351672490143337][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 25710 5012 23780740 137788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:09:05][351672490143337][313 ms][DEBUG] targetPkg: running [2025-08-23 21:09:05][351672490143337][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 21:09:05][351672490143337][313 ms][DEBUG] START check_boot_completed [2025-08-23 21:09:05][351672490143337][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:09:05][351672490143337][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:09:05][351672490143337][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:09:05][351672490143337][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:09:05][351672490143337][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:09:05][351672490143337][392 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:09:05][351672490143337][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672490143337\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7464\"}'\'' -e'"" [2025-08-23 21:09:05][351672490143337][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:09:05][351672490143337][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672490143337\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7464\"}'\'' -e'"" [2025-08-23 21:09:12][351672490143337][7436 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35601c82-f612-44c5-85d1-df428f3146bb","id":"QR_35601c82-f612-44c5-85d1-df428f3146bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:09:12][351672490143337][7593 ms][DEBUG] proc_open done in 7201 ms; code=255; res.len=3343 [2025-08-23 21:09:12][351672490143337][7593 ms][DEBUG] END runCmdUntilRes#1 in 7201 ms [2025-08-23 21:09:12][351672490143337][7593 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:09:16][354916443626717][0 ms][INFO] === Request start === [2025-08-23 21:09:16][354916443626717][1 ms][DEBUG] START check_scloud [2025-08-23 21:09:16][354916443626717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:09:17][354916443626717][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25710 5012 23923340 149820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:09:17][354916443626717][305 ms][DEBUG] targetPkg: running [2025-08-23 21:09:17][354916443626717][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 21:09:17][354916443626717][305 ms][DEBUG] START check_boot_completed [2025-08-23 21:09:17][354916443626717][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:09:17][354916443626717][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:09:17][354916443626717][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:09:17][354916443626717][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:09:17][354916443626717][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:09:17][354916443626717][414 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:09:17][354916443626717][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9315\"}'\'' -e'"" [2025-08-23 21:09:17][354916443626717][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:09:17][354916443626717][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916443626717\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9315\"}'\'' -e'"" [2025-08-23 21:09:21][354916443626717][4257 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 21:09:21][354916443626717][4413 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=107 [2025-08-23 21:09:21][354916443626717][4413 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-23 21:09:21][354916443626717][4413 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 21:09:21][][0 ms][INFO] === Request start === [2025-08-23 21:09:21][][1 ms][DEBUG] START check_scloud [2025-08-23 21:09:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:09:21][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25710 5012 24094484 160796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:09:21][][311 ms][DEBUG] targetPkg: running [2025-08-23 21:09:21][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 21:09:21][][311 ms][DEBUG] START check_boot_completed [2025-08-23 21:09:21][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:09:21][][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:09:21][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:09:21][][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:09:21][][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 21:09:21][][405 ms][DEBUG] rawBody.length=1129 [2025-08-23 21:09:21][][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40XL0JB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8853\"}'\'' -e'"" [2025-08-23 21:09:21][][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:09:21][][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40XL0JB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8853\"}'\'' -e'"" [2025-08-23 21:09:25][][3904 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 21:09:25][][4060 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=107 [2025-08-23 21:09:25][][4060 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-23 21:09:25][][4060 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 21:10:04][359156947039647][0 ms][INFO] === Request start === [2025-08-23 21:10:04][359156947039647][1 ms][DEBUG] START check_scloud [2025-08-23 21:10:04][359156947039647][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:10:04][359156947039647][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 25710 5012 24167348 172180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:10:04][359156947039647][319 ms][DEBUG] targetPkg: running [2025-08-23 21:10:04][359156947039647][319 ms][DEBUG] END check_scloud in 319 ms [2025-08-23 21:10:04][359156947039647][319 ms][DEBUG] START check_boot_completed [2025-08-23 21:10:04][359156947039647][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:10:05][359156947039647][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:10:05][359156947039647][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:10:05][359156947039647][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:10:05][359156947039647][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:10:05][359156947039647][429 ms][DEBUG] START check_internet [2025-08-23 21:10:05][359156947039647][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.978/201.978/201.978/0.000 ms\n [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] check_internet: online [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] END check_internet in 531 ms [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:10:05][359156947039647][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947039647\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8642\"}'\'' -e'"" [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:10:05][359156947039647][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947039647\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8642\"}'\'' -e'"" [2025-08-23 21:10:09][359156947039647][4834 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62671465-fc41-4829-8d05-6afb8951f3b3","id":"QR_62671465-fc41-4829-8d05-6afb8951f3b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:10:09][359156947039647][4990 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-23 21:10:09][359156947039647][4990 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-23 21:10:09][359156947039647][4990 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:14:05][357855570956637][1 ms][INFO] === Request start === [2025-08-23 21:14:05][357855570956637][1 ms][DEBUG] START check_scloud [2025-08-23 21:14:05][357855570956637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:14:05][357855570956637][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 25710 5012 24287256 183924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:14:05][357855570956637][315 ms][DEBUG] targetPkg: running [2025-08-23 21:14:05][357855570956637][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-23 21:14:05][357855570956637][315 ms][DEBUG] START check_boot_completed [2025-08-23 21:14:05][357855570956637][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:14:05][357855570956637][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:14:05][357855570956637][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:14:05][357855570956637][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:14:05][357855570956637][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:14:05][357855570956637][393 ms][DEBUG] START check_internet [2025-08-23 21:14:05][357855570956637][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.134/169.134/169.134/0.000 ms\n [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] check_internet: online [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] END check_internet in 297 ms [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:14:06][357855570956637][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855570956637\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5347\"}'\'' -e'"" [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:14:06][357855570956637][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855570956637\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5347\"}'\'' -e'"" [2025-08-23 21:14:11][357855570956637][6048 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d24f2f2-8ceb-4375-b2ab-49b52c58ca9b","id":"QR_4d24f2f2-8ceb-4375-b2ab-49b52c58ca9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:14:11][357855570956637][6204 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 21:14:11][357855570956637][6204 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 21:14:11][357855570956637][6204 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:18:03][356694920764966][1 ms][INFO] === Request start === [2025-08-23 21:18:03][356694920764966][1 ms][DEBUG] START check_scloud [2025-08-23 21:18:03][356694920764966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:18:03][356694920764966][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25710 5012 24415484 195308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:18:03][356694920764966][303 ms][DEBUG] targetPkg: running [2025-08-23 21:18:03][356694920764966][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-23 21:18:03][356694920764966][303 ms][DEBUG] START check_boot_completed [2025-08-23 21:18:03][356694920764966][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:18:03][356694920764966][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:18:03][356694920764966][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:18:03][356694920764966][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:18:03][356694920764966][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:18:03][356694920764966][381 ms][DEBUG] START check_internet [2025-08-23 21:18:03][356694920764966][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:18:04][356694920764966][865 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.969/200.969/200.969/0.000 ms\n [2025-08-23 21:18:04][356694920764966][865 ms][DEBUG] check_internet: online [2025-08-23 21:18:04][356694920764966][865 ms][DEBUG] END check_internet in 484 ms [2025-08-23 21:18:04][356694920764966][866 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:18:04][356694920764966][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356694920764966\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8093\"}'\'' -e'"" [2025-08-23 21:18:04][356694920764966][866 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:18:04][356694920764966][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356694920764966\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8093\"}'\'' -e'"" [2025-08-23 21:18:08][356694920764966][4958 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eabd6fbf-d350-498c-aa54-f4df63b074c6","id":"QR_eabd6fbf-d350-498c-aa54-f4df63b074c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:18:08][356694920764966][5114 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-23 21:18:08][356694920764966][5114 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-23 21:18:08][356694920764966][5114 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:18:11][352731458993692][0 ms][INFO] === Request start === [2025-08-23 21:18:11][352731458993692][1 ms][DEBUG] START check_scloud [2025-08-23 21:18:11][352731458993692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:18:11][352731458993692][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25710 5012 24582532 206888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:18:11][352731458993692][311 ms][DEBUG] targetPkg: running [2025-08-23 21:18:11][352731458993692][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 21:18:11][352731458993692][311 ms][DEBUG] START check_boot_completed [2025-08-23 21:18:11][352731458993692][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:18:11][352731458993692][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:18:11][352731458993692][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:18:11][352731458993692][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:18:11][352731458993692][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:18:11][352731458993692][389 ms][DEBUG] START check_internet [2025-08-23 21:18:11][352731458993692][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.192/240.192/240.192/0.000 ms\n [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] check_internet: online [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] END check_internet in 359 ms [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:18:11][352731458993692][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731458993692\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5628\"}'\'' -e'"" [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:18:11][352731458993692][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731458993692\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5628\"}'\'' -e'"" [2025-08-23 21:18:15][352731458993692][4450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bd49fe9-10c8-47f9-9d94-7bc8c3ccf2a7","id":"QR_0bd49fe9-10c8-47f9-9d94-7bc8c3ccf2a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:18:15][352731458993692][4606 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-23 21:18:15][352731458993692][4606 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-23 21:18:15][352731458993692][4606 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:19:03][357866607992131][0 ms][INFO] === Request start === [2025-08-23 21:19:03][357866607992131][1 ms][DEBUG] START check_scloud [2025-08-23 21:19:03][357866607992131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:19:03][357866607992131][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 25710 5012 24675780 218012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:19:03][357866607992131][310 ms][DEBUG] targetPkg: running [2025-08-23 21:19:03][357866607992131][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 21:19:03][357866607992131][310 ms][DEBUG] START check_boot_completed [2025-08-23 21:19:03][357866607992131][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:19:03][357866607992131][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:19:03][357866607992131][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:19:04][357866607992131][419 ms][DEBUG] SU: done in 63 ms; out [2025-08-23 21:19:04][357866607992131][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:19:04][357866607992131][419 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:19:04][357866607992131][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866607992131\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4778\"}'\'' -e'"" [2025-08-23 21:19:04][357866607992131][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:19:04][357866607992131][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866607992131\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4778\"}'\'' -e'"" [2025-08-23 21:19:08][357866607992131][4527 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6ec5686-4449-47fe-afd0-11286541ea07","id":"QR_c6ec5686-4449-47fe-afd0-11286541ea07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:19:08][357866607992131][4683 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-23 21:19:08][357866607992131][4683 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-23 21:19:08][357866607992131][4684 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:19:12][355195460089781][0 ms][INFO] === Request start === [2025-08-23 21:19:12][355195460089781][1 ms][DEBUG] START check_scloud [2025-08-23 21:19:12][355195460089781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:19:12][355195460089781][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25710 5012 24847052 229880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:19:12][355195460089781][315 ms][DEBUG] targetPkg: running [2025-08-23 21:19:12][355195460089781][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 21:19:12][355195460089781][315 ms][DEBUG] START check_boot_completed [2025-08-23 21:19:12][355195460089781][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:19:12][355195460089781][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:19:12][355195460089781][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:19:12][355195460089781][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:19:12][355195460089781][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:19:12][355195460089781][425 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:19:12][355195460089781][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195460089781\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5456\"}'\'' -e'"" [2025-08-23 21:19:12][355195460089781][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:19:12][355195460089781][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195460089781\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5456\"}'\'' -e'"" [2025-08-23 21:19:18][355195460089781][5845 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c08dbd61-f7e7-4276-ad31-529b5f939c7b","id":"QR_c08dbd61-f7e7-4276-ad31-529b5f939c7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:19:18][355195460089781][6001 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3343 [2025-08-23 21:19:18][355195460089781][6001 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-08-23 21:19:18][355195460089781][6001 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:20:04][356241328406426][1 ms][INFO] === Request start === [2025-08-23 21:20:04][356241328406426][1 ms][DEBUG] START check_scloud [2025-08-23 21:20:04][356241328406426][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:20:05][356241328406426][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25710 5012 24991628 240488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:20:05][356241328406426][315 ms][DEBUG] targetPkg: running [2025-08-23 21:20:05][356241328406426][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-23 21:20:05][356241328406426][315 ms][DEBUG] START check_boot_completed [2025-08-23 21:20:05][356241328406426][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:20:05][356241328406426][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:20:05][356241328406426][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:20:05][356241328406426][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:20:05][356241328406426][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 21:20:05][356241328406426][409 ms][DEBUG] START check_internet [2025-08-23 21:20:05][356241328406426][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:20:05][356241328406426][752 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.111/239.111/239.111/0.000 ms\n [2025-08-23 21:20:05][356241328406426][753 ms][DEBUG] check_internet: online [2025-08-23 21:20:05][356241328406426][753 ms][DEBUG] END check_internet in 344 ms [2025-08-23 21:20:05][356241328406426][753 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:20:05][356241328406426][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241328406426\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1071\"}'\'' -e'"" [2025-08-23 21:20:05][356241328406426][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:20:05][356241328406426][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241328406426\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1071\"}'\'' -e'"" [2025-08-23 21:20:09][356241328406426][4455 ms][DEBUG] proc_open done in 3701 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 21:20:09][356241328406426][4455 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-23 21:20:09][356241328406426][4455 ms][WARN] Detected error: Process with pid 25710 either refused to load frida-agent, or terminated during injection [2025-08-23 21:20:09][356241328406426][4455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 21:20:09][356241328406426][4611 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 21:20:09][356241328406426][4611 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 21:20:09][356241328406426][4611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 21:20:09][356241328406426][4752 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 21:20:09][356241328406426][4752 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 21:20:09][356241328406426][4908 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 21:20:11][356241328406426][6923 ms][DEBUG] START check_boot_completed [2025-08-23 21:20:11][356241328406426][6923 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:20:11][356241328406426][6970 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:20:11][356241328406426][6970 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:20:11][356241328406426][7017 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:20:11][356241328406426][7017 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 21:20:14][356241328406426][10031 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 21:20:14][356241328406426][10031 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241328406426\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1071\"}'\'' -e'"" [2025-08-23 21:20:23][356241328406426][18686 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d9779e5-0757-4c9f-9acf-23a463b85300","id":"QR_8d9779e5-0757-4c9f-9acf-23a463b85300","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:20:23][356241328406426][18842 ms][DEBUG] proc_open done in 8810 ms; code=255; res.len=3343 [2025-08-23 21:20:23][356241328406426][18842 ms][DEBUG] END runCmdUntilRes#2 in 8811 ms [2025-08-23 21:20:23][356241328406426][18842 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:25:03][355403290962411][1 ms][INFO] === Request start === [2025-08-23 21:25:03][355403290962411][1 ms][DEBUG] START check_scloud [2025-08-23 21:25:03][355403290962411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:25:03][355403290962411][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 27281 5012 23581540 126184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:25:03][355403290962411][304 ms][DEBUG] targetPkg: running [2025-08-23 21:25:03][355403290962411][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 21:25:03][355403290962411][304 ms][DEBUG] START check_boot_completed [2025-08-23 21:25:03][355403290962411][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:25:03][355403290962411][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:25:03][355403290962411][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:25:03][355403290962411][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:25:03][355403290962411][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:25:03][355403290962411][413 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:25:03][355403290962411][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355403290962411\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9157\"}'\'' -e'"" [2025-08-23 21:25:03][355403290962411][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:25:03][355403290962411][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355403290962411\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9157\"}'\'' -e'"" [2025-08-23 21:25:08][355403290962411][4693 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2167828-3928-453e-840b-38601a752c45","id":"QR_c2167828-3928-453e-840b-38601a752c45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:25:08][355403290962411][4849 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-23 21:25:08][355403290962411][4849 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-23 21:25:08][355403290962411][4849 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:26:04][359488091396584][0 ms][INFO] === Request start === [2025-08-23 21:26:04][359488091396584][1 ms][DEBUG] START check_scloud [2025-08-23 21:26:04][359488091396584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:26:05][359488091396584][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27281 5012 23715784 137192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:26:05][359488091396584][303 ms][DEBUG] targetPkg: running [2025-08-23 21:26:05][359488091396584][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 21:26:05][359488091396584][303 ms][DEBUG] START check_boot_completed [2025-08-23 21:26:05][359488091396584][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:26:05][359488091396584][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:26:05][359488091396584][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:26:05][359488091396584][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:26:05][359488091396584][412 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-23 21:26:05][359488091396584][412 ms][DEBUG] START check_internet [2025-08-23 21:26:05][359488091396584][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:26:05][359488091396584][880 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.762/201.762/201.762/0.000 ms\n [2025-08-23 21:26:05][359488091396584][880 ms][DEBUG] check_internet: online [2025-08-23 21:26:05][359488091396584][880 ms][DEBUG] END check_internet in 469 ms [2025-08-23 21:26:05][359488091396584][880 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:26:05][359488091396584][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359488091396584\",\"model\":\"SM-N960U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5395\"}'\'' -e'"" [2025-08-23 21:26:05][359488091396584][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:26:05][359488091396584][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359488091396584\",\"model\":\"SM-N960U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5395\"}'\'' -e'"" [2025-08-23 21:26:12][359488091396584][7253 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a6a6b67-1771-4216-9c61-d64a8cec4ba0","id":"QR_4a6a6b67-1771-4216-9c61-d64a8cec4ba0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:26:12][359488091396584][7410 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3343 [2025-08-23 21:26:12][359488091396584][7410 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-23 21:26:12][359488091396584][7410 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:31:05][358615318586768][1 ms][INFO] === Request start === [2025-08-23 21:31:05][358615318586768][1 ms][DEBUG] START check_scloud [2025-08-23 21:31:05][358615318586768][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:31:05][358615318586768][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27281 5012 23882916 148116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:31:05][358615318586768][311 ms][DEBUG] targetPkg: running [2025-08-23 21:31:05][358615318586768][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 21:31:05][358615318586768][311 ms][DEBUG] START check_boot_completed [2025-08-23 21:31:05][358615318586768][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:31:05][358615318586768][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:31:05][358615318586768][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:31:05][358615318586768][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:31:05][358615318586768][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:31:05][358615318586768][421 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:31:05][358615318586768][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318586768\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7500\"}'\'' -e'"" [2025-08-23 21:31:05][358615318586768][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:31:05][358615318586768][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318586768\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7500\"}'\'' -e'"" [2025-08-23 21:31:11][358615318586768][6107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_564ee870-dfc6-4288-a087-49bc2da9e2be","id":"QR_564ee870-dfc6-4288-a087-49bc2da9e2be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:31:11][358615318586768][6263 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-08-23 21:31:11][358615318586768][6263 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 21:31:11][358615318586768][6263 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:36:04][357967971723035][1 ms][INFO] === Request start === [2025-08-23 21:36:04][357967971723035][1 ms][DEBUG] START check_scloud [2025-08-23 21:36:04][357967971723035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:36:04][357967971723035][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 27281 5012 24032648 160604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:36:04][357967971723035][264 ms][DEBUG] targetPkg: running [2025-08-23 21:36:04][357967971723035][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-23 21:36:04][357967971723035][264 ms][DEBUG] START check_boot_completed [2025-08-23 21:36:04][357967971723035][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:36:04][357967971723035][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:36:04][357967971723035][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:36:04][357967971723035][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:36:04][357967971723035][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:36:04][357967971723035][343 ms][DEBUG] START check_internet [2025-08-23 21:36:04][357967971723035][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.043/202.043/202.043/0.000 ms\n [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] check_internet: online [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] END check_internet in 515 ms [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:36:05][357967971723035][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971723035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5144\"}'\'' -e'"" [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:36:05][357967971723035][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971723035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5144\"}'\'' -e'"" [2025-08-23 21:36:09][357967971723035][5372 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ba8d3e4-95d1-4eae-a492-af4148b7cbcf","id":"QR_9ba8d3e4-95d1-4eae-a492-af4148b7cbcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:36:09][357967971723035][5529 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-23 21:36:09][357967971723035][5529 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-23 21:36:09][357967971723035][5529 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:36:14][353809891306646][0 ms][INFO] === Request start === [2025-08-23 21:36:14][353809891306646][1 ms][DEBUG] START check_scloud [2025-08-23 21:36:14][353809891306646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:36:14][353809891306646][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27281 5012 24185424 171500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:36:14][353809891306646][309 ms][DEBUG] targetPkg: running [2025-08-23 21:36:14][353809891306646][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-23 21:36:14][353809891306646][309 ms][DEBUG] START check_boot_completed [2025-08-23 21:36:14][353809891306646][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:36:15][353809891306646][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:36:15][353809891306646][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:36:15][353809891306646][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:36:15][353809891306646][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:36:15][353809891306646][419 ms][DEBUG] START check_internet [2025-08-23 21:36:15][353809891306646][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.063/201.063/201.063/0.000 ms\n [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] check_internet: online [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] END check_internet in 531 ms [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] rawBody.length=1159 [2025-08-23 21:36:15][353809891306646][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891306646\",\"model\":\"SM-T733\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W808MFTJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:36:15][353809891306646][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891306646\",\"model\":\"SM-T733\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W808MFTJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-23 21:36:21][353809891306646][6511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_616b8887-fd7f-4677-ac21-a33033dd918b","id":"QR_616b8887-fd7f-4677-ac21-a33033dd918b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:36:21][353809891306646][6667 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-23 21:36:21][353809891306646][6667 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-23 21:36:21][353809891306646][6667 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:37:04][353235522331219][0 ms][INFO] === Request start === [2025-08-23 21:37:04][353235522331219][1 ms][DEBUG] START check_scloud [2025-08-23 21:37:04][353235522331219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:37:04][353235522331219][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 27281 5012 24290120 183500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:37:04][353235522331219][304 ms][DEBUG] targetPkg: running [2025-08-23 21:37:04][353235522331219][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 21:37:04][353235522331219][304 ms][DEBUG] START check_boot_completed [2025-08-23 21:37:04][353235522331219][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:37:04][353235522331219][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:37:04][353235522331219][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:37:04][353235522331219][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:37:04][353235522331219][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:37:04][353235522331219][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:37:04][353235522331219][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522331219\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5402\"}'\'' -e'"" [2025-08-23 21:37:04][353235522331219][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:37:04][353235522331219][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522331219\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5402\"}'\'' -e'"" [2025-08-23 21:37:11][353235522331219][7927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4da6abd-8ecb-4ba7-8710-33261e1e602f","id":"QR_e4da6abd-8ecb-4ba7-8710-33261e1e602f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:37:12][353235522331219][8083 ms][DEBUG] proc_open done in 7669 ms; code=255; res.len=3343 [2025-08-23 21:37:12][353235522331219][8083 ms][DEBUG] END runCmdUntilRes#1 in 7670 ms [2025-08-23 21:37:12][353235522331219][8083 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:38:04][354106704973301][0 ms][INFO] === Request start === [2025-08-23 21:38:04][354106704973301][1 ms][DEBUG] START check_scloud [2025-08-23 21:38:04][354106704973301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:38:05][354106704973301][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27281 5012 24444844 194552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:38:05][354106704973301][305 ms][DEBUG] targetPkg: running [2025-08-23 21:38:05][354106704973301][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 21:38:05][354106704973301][305 ms][DEBUG] START check_boot_completed [2025-08-23 21:38:05][354106704973301][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:38:05][354106704973301][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:38:05][354106704973301][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:38:05][354106704973301][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:38:05][354106704973301][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 21:38:05][354106704973301][399 ms][DEBUG] START check_internet [2025-08-23 21:38:05][354106704973301][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:38:05][354106704973301][758 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.137/266.137/266.137/0.000 ms\n [2025-08-23 21:38:05][354106704973301][758 ms][DEBUG] check_internet: online [2025-08-23 21:38:05][354106704973301][758 ms][DEBUG] END check_internet in 360 ms [2025-08-23 21:38:05][354106704973301][758 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:38:05][354106704973301][758 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106704973301\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-23 21:38:05][354106704973301][759 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:38:05][354106704973301][759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106704973301\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-23 21:38:12][354106704973301][7475 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11e885c1-cbc8-4ce2-8adb-601513bf94a6","id":"QR_11e885c1-cbc8-4ce2-8adb-601513bf94a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:38:12][354106704973301][7631 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=3343 [2025-08-23 21:38:12][354106704973301][7631 ms][DEBUG] END runCmdUntilRes#1 in 6873 ms [2025-08-23 21:38:12][354106704973301][7631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:39:06][352845142206368][1 ms][INFO] === Request start === [2025-08-23 21:39:06][352845142206368][1 ms][DEBUG] START check_scloud [2025-08-23 21:39:06][352845142206368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:39:06][352845142206368][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 27281 5012 24548304 206304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:39:06][352845142206368][254 ms][DEBUG] targetPkg: running [2025-08-23 21:39:06][352845142206368][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-23 21:39:06][352845142206368][254 ms][DEBUG] START check_boot_completed [2025-08-23 21:39:06][352845142206368][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:39:06][352845142206368][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:39:06][352845142206368][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:39:06][352845142206368][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:39:06][352845142206368][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 21:39:06][352845142206368][347 ms][DEBUG] rawBody.length=1159 [2025-08-23 21:39:06][352845142206368][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352845142206368\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X302EJ7R\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3367\"}'\'' -e'"" [2025-08-23 21:39:06][352845142206368][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:39:06][352845142206368][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352845142206368\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X302EJ7R\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3367\"}'\'' -e'"" [2025-08-23 21:39:12][352845142206368][6314 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_061d0202-e10f-4bac-a204-a2ec92bd96d9","id":"QR_061d0202-e10f-4bac-a204-a2ec92bd96d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:39:12][352845142206368][6471 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-08-23 21:39:12][352845142206368][6471 ms][DEBUG] END runCmdUntilRes#1 in 6124 ms [2025-08-23 21:39:12][352845142206368][6471 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:42:03][351199554419460][1 ms][INFO] === Request start === [2025-08-23 21:42:03][351199554419460][1 ms][DEBUG] START check_scloud [2025-08-23 21:42:03][351199554419460][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:42:03][351199554419460][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 27281 5012 24694836 217172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:42:03][351199554419460][302 ms][DEBUG] targetPkg: running [2025-08-23 21:42:03][351199554419460][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-23 21:42:03][351199554419460][302 ms][DEBUG] START check_boot_completed [2025-08-23 21:42:03][351199554419460][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:42:03][351199554419460][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:42:03][351199554419460][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:42:03][351199554419460][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:42:03][351199554419460][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 21:42:03][351199554419460][395 ms][DEBUG] START check_internet [2025-08-23 21:42:03][351199554419460][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.602/202.602/202.602/0.000 ms\n [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] check_internet: online [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] END check_internet in 515 ms [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:42:04][351199554419460][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554419460\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4497\"}'\'' -e'"" [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:42:04][351199554419460][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554419460\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4497\"}'\'' -e'"" [2025-08-23 21:42:08][351199554419460][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b2b564a-75df-4aa6-9b62-052f7f88c18b","id":"QR_1b2b564a-75df-4aa6-9b62-052f7f88c18b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:42:08][351199554419460][5034 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-23 21:42:08][351199554419460][5035 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-23 21:42:08][351199554419460][5035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:43:05][356408513493200][0 ms][INFO] === Request start === [2025-08-23 21:43:05][356408513493200][1 ms][DEBUG] START check_scloud [2025-08-23 21:43:05][356408513493200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:43:05][356408513493200][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27281 5012 24802460 227356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:43:05][356408513493200][305 ms][DEBUG] targetPkg: running [2025-08-23 21:43:05][356408513493200][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 21:43:05][356408513493200][306 ms][DEBUG] START check_boot_completed [2025-08-23 21:43:05][356408513493200][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:43:05][356408513493200][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:43:05][356408513493200][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:43:05][356408513493200][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:43:05][356408513493200][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:43:05][356408513493200][415 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:43:05][356408513493200][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408513493200\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2179\"}'\'' -e'"" [2025-08-23 21:43:05][356408513493200][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:43:05][356408513493200][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408513493200\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2179\"}'\'' -e'"" [2025-08-23 21:43:10][356408513493200][5679 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2e4d651-9409-4ab8-80dc-256b1509a309","id":"QR_b2e4d651-9409-4ab8-80dc-256b1509a309","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:43:11][356408513493200][5835 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-23 21:43:11][356408513493200][5835 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-23 21:43:11][356408513493200][5835 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:44:04][358633107340495][1 ms][INFO] === Request start === [2025-08-23 21:44:04][358633107340495][1 ms][DEBUG] START check_scloud [2025-08-23 21:44:04][358633107340495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:44:04][358633107340495][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 27281 5012 24918400 239072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:44:04][358633107340495][307 ms][DEBUG] targetPkg: running [2025-08-23 21:44:04][358633107340495][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-23 21:44:04][358633107340495][307 ms][DEBUG] START check_boot_completed [2025-08-23 21:44:04][358633107340495][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:44:05][358633107340495][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:44:05][358633107340495][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:44:05][358633107340495][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 21:44:05][358633107340495][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 21:44:05][358633107340495][401 ms][DEBUG] START check_internet [2025-08-23 21:44:05][358633107340495][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:44:05][358633107340495][759 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.838/249.838/249.838/0.000 ms\n [2025-08-23 21:44:05][358633107340495][760 ms][DEBUG] check_internet: online [2025-08-23 21:44:05][358633107340495][760 ms][DEBUG] END check_internet in 358 ms [2025-08-23 21:44:05][358633107340495][760 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:44:05][358633107340495][760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358633107340495\",\"model\":\"SM-A307G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3982\"}'\'' -e'"" [2025-08-23 21:44:05][358633107340495][760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:44:05][358633107340495][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358633107340495\",\"model\":\"SM-A307G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3982\"}'\'' -e'"" [2025-08-23 21:44:09][358633107340495][4633 ms][DEBUG] proc_open done in 3873 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 21:44:09][358633107340495][4633 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-23 21:44:09][358633107340495][4633 ms][WARN] Detected error: Process with pid 27281 either refused to load frida-agent, or terminated during injection [2025-08-23 21:44:09][358633107340495][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 21:44:09][358633107340495][4774 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 21:44:09][358633107340495][4774 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 21:44:09][358633107340495][4774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 21:44:09][358633107340495][4899 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 21:44:09][358633107340495][4899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 21:44:09][358633107340495][5041 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 21:44:11][358633107340495][7055 ms][DEBUG] START check_boot_completed [2025-08-23 21:44:11][358633107340495][7055 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:44:11][358633107340495][7086 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:44:11][358633107340495][7086 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:44:11][358633107340495][7133 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:44:11][358633107340495][7133 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:44:14][358633107340495][10148 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 21:44:14][358633107340495][10148 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358633107340495\",\"model\":\"SM-A307G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3982\"}'\'' -e'"" [2025-08-23 21:44:22][358633107340495][17474 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_979806b1-0acb-42de-a1f5-288d957574f4","id":"QR_979806b1-0acb-42de-a1f5-288d957574f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:44:22][358633107340495][17630 ms][DEBUG] proc_open done in 7483 ms; code=255; res.len=3343 [2025-08-23 21:44:22][358633107340495][17630 ms][DEBUG] END runCmdUntilRes#2 in 7483 ms [2025-08-23 21:44:22][358633107340495][17631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:45:05][357618781538101][0 ms][INFO] === Request start === [2025-08-23 21:45:05][357618781538101][1 ms][DEBUG] START check_scloud [2025-08-23 21:45:05][357618781538101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:45:05][357618781538101][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 29931 5012 23598452 126980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:45:05][357618781538101][301 ms][DEBUG] targetPkg: running [2025-08-23 21:45:05][357618781538101][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 21:45:05][357618781538101][301 ms][DEBUG] START check_boot_completed [2025-08-23 21:45:05][357618781538101][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:45:05][357618781538101][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:45:05][357618781538101][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:45:05][357618781538101][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:45:05][357618781538101][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:45:05][357618781538101][379 ms][DEBUG] rawBody.length=1149 [2025-08-23 21:45:05][357618781538101][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618781538101\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6215\"}'\'' -e'"" [2025-08-23 21:45:05][357618781538101][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:45:05][357618781538101][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618781538101\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6215\"}'\'' -e'"" [2025-08-23 21:45:10][357618781538101][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab0fcc4f-0af6-4603-bc72-615441df8a28","id":"QR_ab0fcc4f-0af6-4603-bc72-615441df8a28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:45:10][357618781538101][5737 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-08-23 21:45:10][357618781538101][5737 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-23 21:45:10][357618781538101][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:52:02][354916442663026][1 ms][INFO] === Request start === [2025-08-23 21:52:02][354916442663026][1 ms][DEBUG] START check_scloud [2025-08-23 21:52:02][354916442663026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:52:02][354916442663026][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 29931 5012 23718264 137848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:52:02][354916442663026][301 ms][DEBUG] targetPkg: running [2025-08-23 21:52:02][354916442663026][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-23 21:52:02][354916442663026][302 ms][DEBUG] START check_boot_completed [2025-08-23 21:52:02][354916442663026][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:52:02][354916442663026][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 21:52:02][354916442663026][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:52:02][354916442663026][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:52:02][354916442663026][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 21:52:02][354916442663026][395 ms][DEBUG] START check_internet [2025-08-23 21:52:02][354916442663026][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:52:03][354916442663026][895 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.287/200.287/200.287/0.000 ms\n [2025-08-23 21:52:03][354916442663026][895 ms][DEBUG] check_internet: online [2025-08-23 21:52:03][354916442663026][895 ms][DEBUG] END check_internet in 500 ms [2025-08-23 21:52:03][354916442663026][895 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:52:03][354916442663026][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8521\"}'\'' -e'"" [2025-08-23 21:52:03][354916442663026][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:52:03][354916442663026][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8521\"}'\'' -e'"" [2025-08-23 21:52:07][354916442663026][5034 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81f5d2f2-037d-4b46-9a2a-bf3ee4375288","id":"QR_81f5d2f2-037d-4b46-9a2a-bf3ee4375288","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:52:07][354916442663026][5191 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-23 21:52:07][354916442663026][5191 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-23 21:52:07][354916442663026][5191 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:52:08][354892910777335][0 ms][INFO] === Request start === [2025-08-23 21:52:08][354892910777335][1 ms][DEBUG] START check_scloud [2025-08-23 21:52:08][354892910777335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:52:09][354892910777335][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 29931 5012 23917196 149520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:52:09][354892910777335][312 ms][DEBUG] targetPkg: running [2025-08-23 21:52:09][354892910777335][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 21:52:09][354892910777335][313 ms][DEBUG] START check_boot_completed [2025-08-23 21:52:09][354892910777335][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:52:09][354892910777335][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 21:52:09][354892910777335][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:52:09][354892910777335][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 21:52:09][354892910777335][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 21:52:09][354892910777335][422 ms][DEBUG] START check_internet [2025-08-23 21:52:09][354892910777335][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.205/200.205/200.205/0.000 ms\n [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] check_internet: online [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] END check_internet in 328 ms [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:52:09][354892910777335][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910777335\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9063\"}'\'' -e'"" [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:52:09][354892910777335][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910777335\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9063\"}'\'' -e'"" [2025-08-23 21:52:13][354892910777335][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df5968e6-9e8b-42e4-a81c-825bc2f15999","id":"QR_df5968e6-9e8b-42e4-a81c-825bc2f15999","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:52:13][354892910777335][4624 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-23 21:52:13][354892910777335][4624 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-23 21:52:13][354892910777335][4624 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:55:06][355857112387356][1 ms][INFO] === Request start === [2025-08-23 21:55:06][355857112387356][1 ms][DEBUG] START check_scloud [2025-08-23 21:55:06][355857112387356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:55:06][355857112387356][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 29931 5012 24057616 161044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:55:06][355857112387356][297 ms][DEBUG] targetPkg: running [2025-08-23 21:55:06][355857112387356][297 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 21:55:06][355857112387356][297 ms][DEBUG] START check_boot_completed [2025-08-23 21:55:06][355857112387356][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:55:06][355857112387356][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:55:06][355857112387356][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:55:06][355857112387356][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:55:06][355857112387356][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:55:06][355857112387356][375 ms][DEBUG] rawBody.length=1159 [2025-08-23 21:55:06][355857112387356][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857112387356\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X50F611W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-08-23 21:55:06][355857112387356][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:55:06][355857112387356][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857112387356\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X50F611W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-08-23 21:55:11][355857112387356][5733 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5843e7e3-2ad7-434f-aae1-a2e314c383fb","id":"QR_5843e7e3-2ad7-434f-aae1-a2e314c383fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:55:11][355857112387356][5889 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 21:55:11][355857112387356][5889 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 21:55:11][355857112387356][5889 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 21:59:03][359525670104259][1 ms][INFO] === Request start === [2025-08-23 21:59:03][359525670104259][1 ms][DEBUG] START check_scloud [2025-08-23 21:59:03][359525670104259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 21:59:04][359525670104259][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 29931 5012 24177524 166784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 21:59:04][359525670104259][339 ms][DEBUG] targetPkg: running [2025-08-23 21:59:04][359525670104259][339 ms][DEBUG] END check_scloud in 338 ms [2025-08-23 21:59:04][359525670104259][339 ms][DEBUG] START check_boot_completed [2025-08-23 21:59:04][359525670104259][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 21:59:04][359525670104259][370 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 21:59:04][359525670104259][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 21:59:04][359525670104259][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 21:59:04][359525670104259][417 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 21:59:04][359525670104259][417 ms][DEBUG] rawBody.length=1148 [2025-08-23 21:59:04][359525670104259][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359525670104259\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3056\"}'\'' -e'"" [2025-08-23 21:59:04][359525670104259][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 21:59:04][359525670104259][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359525670104259\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3056\"}'\'' -e'"" [2025-08-23 21:59:08][359525670104259][4416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f33e501-a71c-4d9d-8882-ffcda9015312","id":"QR_3f33e501-a71c-4d9d-8882-ffcda9015312","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 21:59:08][359525670104259][4572 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-23 21:59:08][359525670104259][4572 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-23 21:59:08][359525670104259][4572 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:00:05][353235522424550][0 ms][INFO] === Request start === [2025-08-23 22:00:05][353235522424550][1 ms][DEBUG] START check_scloud [2025-08-23 22:00:05][353235522424550][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:00:05][353235522424550][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 29931 5012 24334296 152876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:00:05][353235522424550][324 ms][DEBUG] targetPkg: running [2025-08-23 22:00:05][353235522424550][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-23 22:00:05][353235522424550][324 ms][DEBUG] START check_boot_completed [2025-08-23 22:00:05][353235522424550][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:00:05][353235522424550][356 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 22:00:05][353235522424550][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:00:05][353235522424550][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:00:05][353235522424550][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 22:00:05][353235522424550][402 ms][DEBUG] START check_internet [2025-08-23 22:00:05][353235522424550][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.189/199.189/199.189/0.000 ms\n [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] check_internet: online [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] END check_internet in 453 ms [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:00:06][353235522424550][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522424550\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:00:06][353235522424550][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522424550\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-23 22:00:11][353235522424550][6307 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1c4c3c4-20b7-4cc4-a4d0-f785e7b89c88","id":"QR_d1c4c3c4-20b7-4cc4-a4d0-f785e7b89c88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:00:11][353235522424550][6463 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-23 22:00:11][353235522424550][6463 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-23 22:00:11][353235522424550][6463 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:09:05][352429891480571][1 ms][INFO] === Request start === [2025-08-23 22:09:05][352429891480571][1 ms][DEBUG] START check_scloud [2025-08-23 22:09:05][352429891480571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:09:05][352429891480571][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 29931 5012 24447088 147592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:09:05][352429891480571][323 ms][DEBUG] targetPkg: running [2025-08-23 22:09:05][352429891480571][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-23 22:09:05][352429891480571][323 ms][DEBUG] START check_boot_completed [2025-08-23 22:09:05][352429891480571][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:09:05][352429891480571][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:09:05][352429891480571][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:09:05][352429891480571][432 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 22:09:05][352429891480571][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 22:09:05][352429891480571][433 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:09:05][352429891480571][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891480571\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-08-23 22:09:05][352429891480571][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:09:05][352429891480571][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891480571\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-08-23 22:09:11][352429891480571][6025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89e65edd-e9a9-4998-a5e7-c692d1cb4a7e","id":"QR_89e65edd-e9a9-4998-a5e7-c692d1cb4a7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:09:11][352429891480571][6181 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-08-23 22:09:11][352429891480571][6181 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-08-23 22:09:11][352429891480571][6181 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:10:05][350455583026846][0 ms][INFO] === Request start === [2025-08-23 22:10:05][350455583026846][1 ms][DEBUG] START check_scloud [2025-08-23 22:10:05][350455583026846][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:10:05][350455583026846][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 29931 5012 24617376 158940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:10:05][350455583026846][255 ms][DEBUG] targetPkg: running [2025-08-23 22:10:05][350455583026846][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-23 22:10:05][350455583026846][255 ms][DEBUG] START check_boot_completed [2025-08-23 22:10:05][350455583026846][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:10:05][350455583026846][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 22:10:05][350455583026846][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:10:05][350455583026846][349 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 22:10:05][350455583026846][349 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 22:10:05][350455583026846][350 ms][DEBUG] START check_internet [2025-08-23 22:10:05][350455583026846][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.814/202.814/202.814/0.000 ms\n [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] check_internet: online [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] END check_internet in 546 ms [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:10:06][350455583026846][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455583026846\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1598\"}'\'' -e'"" [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:10:06][350455583026846][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455583026846\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1598\"}'\'' -e'"" [2025-08-23 22:10:11][350455583026846][6035 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f98b4b9-69f5-4ee8-8cab-3b5bd25d6717","id":"QR_6f98b4b9-69f5-4ee8-8cab-3b5bd25d6717","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:10:11][350455583026846][6191 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-23 22:10:11][350455583026846][6191 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-23 22:10:11][350455583026846][6191 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:10:18][350633295194769][0 ms][INFO] === Request start === [2025-08-23 22:10:18][350633295194769][1 ms][DEBUG] START check_scloud [2025-08-23 22:10:18][350633295194769][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:10:18][350633295194769][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 29931 5012 24761896 165496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:10:18][350633295194769][319 ms][DEBUG] targetPkg: running [2025-08-23 22:10:18][350633295194769][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-23 22:10:18][350633295194769][319 ms][DEBUG] START check_boot_completed [2025-08-23 22:10:18][350633295194769][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:10:18][350633295194769][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 22:10:18][350633295194769][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:10:18][350633295194769][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:10:18][350633295194769][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 22:10:18][350633295194769][397 ms][DEBUG] START check_internet [2025-08-23 22:10:18][350633295194769][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:10:19][350633295194769][678 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.857/185.857/185.857/0.000 ms\n [2025-08-23 22:10:19][350633295194769][678 ms][DEBUG] check_internet: online [2025-08-23 22:10:19][350633295194769][678 ms][DEBUG] END check_internet in 281 ms [2025-08-23 22:10:19][350633295194769][678 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:10:19][350633295194769][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295194769\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6227\"}'\'' -e'"" [2025-08-23 22:10:19][350633295194769][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:10:19][350633295194769][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295194769\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6227\"}'\'' -e'"" [2025-08-23 22:10:26][350633295194769][7676 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64bcf9f1-75a5-4ed2-98ed-a8a6b468ad33","id":"QR_64bcf9f1-75a5-4ed2-98ed-a8a6b468ad33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:10:26][350633295194769][7832 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=3343 [2025-08-23 22:10:26][350633295194769][7833 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-08-23 22:10:26][350633295194769][7833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:15:04][354081163883442][1 ms][INFO] === Request start === [2025-08-23 22:15:04][354081163883442][1 ms][DEBUG] START check_scloud [2025-08-23 22:15:04][354081163883442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:15:05][354081163883442][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 29931 5012 24881896 176608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:15:05][354081163883442][286 ms][DEBUG] targetPkg: running [2025-08-23 22:15:05][354081163883442][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-23 22:15:05][354081163883442][286 ms][DEBUG] START check_boot_completed [2025-08-23 22:15:05][354081163883442][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:15:05][354081163883442][333 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:15:05][354081163883442][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:15:05][354081163883442][411 ms][DEBUG] SU: done in 78 ms; out [2025-08-23 22:15:05][354081163883442][411 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-23 22:15:05][354081163883442][412 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:15:05][354081163883442][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354081163883442\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-08-23 22:15:05][354081163883442][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:15:05][354081163883442][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354081163883442\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-08-23 22:15:11][354081163883442][6316 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7dcb45f-1c6c-4c8e-a256-eea9454f2cde","id":"QR_d7dcb45f-1c6c-4c8e-a256-eea9454f2cde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:15:11][354081163883442][6472 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-08-23 22:15:11][354081163883442][6473 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-08-23 22:15:11][354081163883442][6473 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:15:15][351521288400633][0 ms][INFO] === Request start === [2025-08-23 22:15:15][351521288400633][1 ms][DEBUG] START check_scloud [2025-08-23 22:15:15][351521288400633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:15:15][351521288400633][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 29931 5012 25028592 188460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:15:15][351521288400633][265 ms][DEBUG] targetPkg: running [2025-08-23 22:15:15][351521288400633][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-23 22:15:15][351521288400633][265 ms][DEBUG] START check_boot_completed [2025-08-23 22:15:15][351521288400633][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:15:15][351521288400633][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:15:15][351521288400633][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:15:15][351521288400633][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:15:15][351521288400633][359 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 22:15:15][351521288400633][359 ms][DEBUG] rawBody.length=1148 [2025-08-23 22:15:15][351521288400633][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-23 22:15:15][351521288400633][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:15:15][351521288400633][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-23 22:15:19][351521288400633][4295 ms][DEBUG] proc_open done in 3935 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 22:15:19][351521288400633][4295 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-23 22:15:19][351521288400633][4295 ms][WARN] Detected error: Process with pid 29931 either refused to load frida-agent, or terminated during injection [2025-08-23 22:15:19][351521288400633][4295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 22:15:20][351521288400633][4436 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 22:15:20][351521288400633][4436 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 22:15:20][351521288400633][4436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 22:15:20][351521288400633][4577 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 22:15:20][351521288400633][4577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 22:15:20][351521288400633][4734 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 22:15:22][351521288400633][6748 ms][DEBUG] START check_boot_completed [2025-08-23 22:15:22][351521288400633][6748 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:15:22][351521288400633][6795 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:15:22][351521288400633][6795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:15:22][351521288400633][6843 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 22:15:22][351521288400633][6843 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 22:15:25][351521288400633][9857 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 22:15:25][351521288400633][9857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521288400633\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-23 22:15:29][351521288400633][13746 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 22:15:29][351521288400633][13903 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=107 [2025-08-23 22:15:29][351521288400633][13903 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-23 22:15:29][351521288400633][13903 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 22:15:29][][0 ms][INFO] === Request start === [2025-08-23 22:15:29][][1 ms][DEBUG] START check_scloud [2025-08-23 22:15:29][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:15:30][][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 32465 5012 23629980 123544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:15:30][][265 ms][DEBUG] targetPkg: running [2025-08-23 22:15:30][][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-23 22:15:30][][265 ms][DEBUG] START check_boot_completed [2025-08-23 22:15:30][][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:15:30][][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:15:30][][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:15:30][][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:15:30][][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 22:15:30][][358 ms][DEBUG] rawBody.length=1129 [2025-08-23 22:15:30][][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW706GYCT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4390\"}'\'' -e'"" [2025-08-23 22:15:30][][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:15:30][][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW706GYCT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4390\"}'\'' -e'"" [2025-08-23 22:15:33][][3623 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 22:15:33][][3779 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=107 [2025-08-23 22:15:33][][3780 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-08-23 22:15:33][][3780 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 22:18:05][357111201157546][1 ms][INFO] === Request start === [2025-08-23 22:18:05][357111201157546][1 ms][DEBUG] START check_scloud [2025-08-23 22:18:05][357111201157546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:18:05][357111201157546][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 32465 5012 23662536 136860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:18:05][357111201157546][322 ms][DEBUG] targetPkg: running [2025-08-23 22:18:05][357111201157546][322 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 22:18:05][357111201157546][322 ms][DEBUG] START check_boot_completed [2025-08-23 22:18:05][357111201157546][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:18:05][357111201157546][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 22:18:05][357111201157546][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:18:05][357111201157546][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:18:05][357111201157546][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 22:18:05][357111201157546][400 ms][DEBUG] START check_internet [2025-08-23 22:18:05][357111201157546][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.947/201.947/201.947/0.000 ms\n [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] check_internet: online [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] END check_internet in 453 ms [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:18:06][357111201157546][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357111201157546\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6351\"}'\'' -e'"" [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:18:06][357111201157546][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357111201157546\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6351\"}'\'' -e'"" [2025-08-23 22:18:11][357111201157546][6414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04181910-7ab3-43e0-9d55-d25528069c0e","id":"QR_04181910-7ab3-43e0-9d55-d25528069c0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:18:12][357111201157546][6570 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-23 22:18:12][357111201157546][6570 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-23 22:18:12][357111201157546][6570 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:21:03][351642486979010][1 ms][INFO] === Request start === [2025-08-23 22:21:03][351642486979010][1 ms][DEBUG] START check_scloud [2025-08-23 22:21:03][351642486979010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:21:03][351642486979010][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32465 5012 23797768 149000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:21:03][351642486979010][311 ms][DEBUG] targetPkg: running [2025-08-23 22:21:03][351642486979010][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-23 22:21:03][351642486979010][311 ms][DEBUG] START check_boot_completed [2025-08-23 22:21:03][351642486979010][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:21:03][351642486979010][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:21:03][351642486979010][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:21:03][351642486979010][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:21:03][351642486979010][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 22:21:03][351642486979010][405 ms][DEBUG] rawBody.length=1148 [2025-08-23 22:21:03][351642486979010][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486979010\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6937\"}'\'' -e'"" [2025-08-23 22:21:03][351642486979010][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:21:03][351642486979010][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486979010\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6937\"}'\'' -e'"" [2025-08-23 22:21:07][351642486979010][4451 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57c1fc07-8a64-4556-bdf2-0812619345b7","id":"QR_57c1fc07-8a64-4556-bdf2-0812619345b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:21:08][351642486979010][4607 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 22:21:08][351642486979010][4607 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 22:21:08][351642486979010][4607 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:26:04][357567911416649][1 ms][INFO] === Request start === [2025-08-23 22:26:04][357567911416649][1 ms][DEBUG] START check_scloud [2025-08-23 22:26:04][357567911416649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:26:04][357567911416649][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 32465 5012 23940332 160264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:26:04][357567911416649][296 ms][DEBUG] targetPkg: running [2025-08-23 22:26:04][357567911416649][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-23 22:26:04][357567911416649][296 ms][DEBUG] START check_boot_completed [2025-08-23 22:26:04][357567911416649][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:26:04][357567911416649][341 ms][DEBUG] ADB: done in 45 ms; out [2025-08-23 22:26:04][357567911416649][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:26:04][357567911416649][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:26:04][357567911416649][388 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-23 22:26:04][357567911416649][388 ms][DEBUG] START check_internet [2025-08-23 22:26:04][357567911416649][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:26:05][357567911416649][919 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.667/202.667/202.667/0.000 ms\n [2025-08-23 22:26:05][357567911416649][919 ms][DEBUG] check_internet: online [2025-08-23 22:26:05][357567911416649][919 ms][DEBUG] END check_internet in 531 ms [2025-08-23 22:26:05][357567911416649][919 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:26:05][357567911416649][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567911416649\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1819\"}'\'' -e'"" [2025-08-23 22:26:05][357567911416649][919 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:26:05][357567911416649][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567911416649\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1819\"}'\'' -e'"" [2025-08-23 22:26:10][357567911416649][6589 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c03b36a-ac1e-4e63-b2db-268758506f9f","id":"QR_1c03b36a-ac1e-4e63-b2db-268758506f9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:26:11][357567911416649][6746 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-23 22:26:11][357567911416649][6746 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-23 22:26:11][357567911416649][6746 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:31:02][352861160669866][1 ms][INFO] === Request start === [2025-08-23 22:31:02][352861160669866][1 ms][DEBUG] START check_scloud [2025-08-23 22:31:02][352861160669866][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:31:03][352861160669866][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 32465 5012 24059728 171448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:31:03][352861160669866][283 ms][DEBUG] targetPkg: running [2025-08-23 22:31:03][352861160669866][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-23 22:31:03][352861160669866][283 ms][DEBUG] START check_boot_completed [2025-08-23 22:31:03][352861160669866][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:31:03][352861160669866][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 22:31:03][352861160669866][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:31:03][352861160669866][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:31:03][352861160669866][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 22:31:03][352861160669866][361 ms][DEBUG] rawBody.length=1148 [2025-08-23 22:31:03][352861160669866][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160669866\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-23 22:31:03][352861160669866][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:31:03][352861160669866][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160669866\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-23 22:31:07][352861160669866][4407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05a36c87-d4bc-4a9b-91d0-688966856a1b","id":"QR_05a36c87-d4bc-4a9b-91d0-688966856a1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:31:07][352861160669866][4563 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-23 22:31:07][352861160669866][4563 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-23 22:31:07][352861160669866][4564 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:32:05][355824554108658][0 ms][INFO] === Request start === [2025-08-23 22:32:05][355824554108658][1 ms][DEBUG] START check_scloud [2025-08-23 22:32:05][355824554108658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:32:05][355824554108658][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 32465 5012 24186932 183476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:32:05][355824554108658][311 ms][DEBUG] targetPkg: running [2025-08-23 22:32:05][355824554108658][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 22:32:05][355824554108658][312 ms][DEBUG] START check_boot_completed [2025-08-23 22:32:05][355824554108658][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:32:05][355824554108658][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:32:05][355824554108658][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:32:05][355824554108658][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 22:32:05][355824554108658][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 22:32:05][355824554108658][421 ms][DEBUG] START check_internet [2025-08-23 22:32:05][355824554108658][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:32:05][355824554108658][889 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.858/202.858/202.858/0.000 ms\n [2025-08-23 22:32:05][355824554108658][889 ms][DEBUG] check_internet: online [2025-08-23 22:32:05][355824554108658][890 ms][DEBUG] END check_internet in 469 ms [2025-08-23 22:32:05][355824554108658][890 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:32:05][355824554108658][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824554108658\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2206\"}'\'' -e'"" [2025-08-23 22:32:05][355824554108658][890 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:32:05][355824554108658][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824554108658\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2206\"}'\'' -e'"" [2025-08-23 22:32:11][355824554108658][6638 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea4a4bf1-ec89-47e8-a74a-118774255a1d","id":"QR_ea4a4bf1-ec89-47e8-a74a-118774255a1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:32:11][355824554108658][6794 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-08-23 22:32:11][355824554108658][6794 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-08-23 22:32:11][355824554108658][6794 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:51:06][][1 ms][INFO] === Request start === [2025-08-23 22:51:06][][1 ms][DEBUG] START check_scloud [2025-08-23 22:51:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:51:06][][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 32465 5012 24283340 171756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:51:06][][308 ms][DEBUG] targetPkg: running [2025-08-23 22:51:06][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 22:51:06][][308 ms][DEBUG] START check_boot_completed [2025-08-23 22:51:06][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:51:06][][352 ms][DEBUG] ADB: done in 44 ms; out [2025-08-23 22:51:06][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:51:06][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:51:06][][399 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-23 22:51:06][][399 ms][DEBUG] rawBody.length=1129 [2025-08-23 22:51:06][][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TX30HJNQM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3704\"}'\'' -e'"" [2025-08-23 22:51:06][][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:51:06][][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TX30HJNQM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3704\"}'\'' -e'"" [2025-08-23 22:51:12][][6351 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 22:51:12][][6507 ms][DEBUG] proc_open done in 6108 ms; code=255; res.len=107 [2025-08-23 22:51:12][][6507 ms][DEBUG] END runCmdUntilRes#1 in 6108 ms [2025-08-23 22:51:12][][6507 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 22:51:13][350932553150376][0 ms][INFO] === Request start === [2025-08-23 22:51:13][350932553150376][1 ms][DEBUG] START check_scloud [2025-08-23 22:51:13][350932553150376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:51:13][350932553150376][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 32465 5012 24465952 170236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:51:13][350932553150376][316 ms][DEBUG] targetPkg: running [2025-08-23 22:51:13][350932553150376][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 22:51:13][350932553150376][316 ms][DEBUG] START check_boot_completed [2025-08-23 22:51:13][350932553150376][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:51:13][350932553150376][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 22:51:13][350932553150376][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:51:13][350932553150376][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 22:51:13][350932553150376][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 22:51:13][350932553150376][409 ms][DEBUG] rawBody.length=1158 [2025-08-23 22:51:13][350932553150376][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350932553150376\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX30HJNQM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5208\"}'\'' -e'"" [2025-08-23 22:51:13][350932553150376][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:51:13][350932553150376][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350932553150376\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX30HJNQM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5208\"}'\'' -e'"" [2025-08-23 22:51:18][350932553150376][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9be74a74-91f5-49fa-aeae-793171fde548","id":"QR_9be74a74-91f5-49fa-aeae-793171fde548","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:51:18][350932553150376][4783 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-23 22:51:18][350932553150376][4783 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-23 22:51:18][350932553150376][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:52:04][350633295358414][0 ms][INFO] === Request start === [2025-08-23 22:52:04][350633295358414][1 ms][DEBUG] START check_scloud [2025-08-23 22:52:04][350633295358414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:52:04][350633295358414][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32465 5012 24600288 182316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:52:04][350633295358414][311 ms][DEBUG] targetPkg: running [2025-08-23 22:52:04][350633295358414][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 22:52:04][350633295358414][311 ms][DEBUG] START check_boot_completed [2025-08-23 22:52:04][350633295358414][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:52:04][350633295358414][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 22:52:04][350633295358414][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:52:04][350633295358414][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 22:52:04][350633295358414][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 22:52:04][350633295358414][421 ms][DEBUG] START check_internet [2025-08-23 22:52:04][350633295358414][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] SU: done in 455 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.010/201.010/201.010/0.000 ms\n [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] check_internet: online [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] END check_internet in 455 ms [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:52:05][350633295358414][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295358414\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4605\"}'\'' -e'"" [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:52:05][350633295358414][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633295358414\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4605\"}'\'' -e'"" [2025-08-23 22:52:10][350633295358414][5825 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_990330e5-33f5-4c55-b85f-62f55a5f54e5","id":"QR_990330e5-33f5-4c55-b85f-62f55a5f54e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:52:10][350633295358414][5982 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-08-23 22:52:10][350633295358414][5982 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-08-23 22:52:10][350633295358414][5982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 22:53:04][352460881876510][0 ms][INFO] === Request start === [2025-08-23 22:53:04][352460881876510][1 ms][DEBUG] START check_scloud [2025-08-23 22:53:04][352460881876510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 22:53:04][352460881876510][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 32465 5012 24712008 193464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 22:53:04][352460881876510][329 ms][DEBUG] targetPkg: running [2025-08-23 22:53:04][352460881876510][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-23 22:53:04][352460881876510][329 ms][DEBUG] START check_boot_completed [2025-08-23 22:53:04][352460881876510][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 22:53:04][352460881876510][376 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 22:53:04][352460881876510][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 22:53:04][352460881876510][424 ms][DEBUG] SU: done in 48 ms; out [2025-08-23 22:53:04][352460881876510][424 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-23 22:53:04][352460881876510][424 ms][DEBUG] rawBody.length=1149 [2025-08-23 22:53:04][352460881876510][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460881876510\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4810\"}'\'' -e'"" [2025-08-23 22:53:04][352460881876510][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 22:53:04][352460881876510][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460881876510\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4810\"}'\'' -e'"" [2025-08-23 22:53:10][352460881876510][6062 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5c6a45b-2eca-4dc6-8266-426875c7caf2","id":"QR_c5c6a45b-2eca-4dc6-8266-426875c7caf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 22:53:10][352460881876510][6218 ms][DEBUG] proc_open done in 5794 ms; code=255; res.len=3343 [2025-08-23 22:53:10][352460881876510][6218 ms][DEBUG] END runCmdUntilRes#1 in 5794 ms [2025-08-23 22:53:10][352460881876510][6218 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:04:05][356722912907606][1 ms][INFO] === Request start === [2025-08-23 23:04:05][356722912907606][1 ms][DEBUG] START check_scloud [2025-08-23 23:04:05][356722912907606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:04:05][356722912907606][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 32465 5012 24800224 177408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:04:05][356722912907606][325 ms][DEBUG] targetPkg: running [2025-08-23 23:04:05][356722912907606][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-23 23:04:05][356722912907606][325 ms][DEBUG] START check_boot_completed [2025-08-23 23:04:05][356722912907606][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:04:05][356722912907606][356 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:04:05][356722912907606][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:04:05][356722912907606][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:04:05][356722912907606][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:04:05][356722912907606][404 ms][DEBUG] START check_internet [2025-08-23 23:04:05][356722912907606][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.738/224.738/224.738/0.000 ms\n [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] check_internet: online [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] END check_internet in 422 ms [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:04:06][356722912907606][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722912907606\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6897\"}'\'' -e'"" [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:04:06][356722912907606][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722912907606\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6897\"}'\'' -e'"" [2025-08-23 23:04:10][356722912907606][4980 ms][DEBUG] proc_open done in 4154 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-23 23:04:10][356722912907606][4980 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-23 23:04:10][356722912907606][4981 ms][WARN] Detected error: Process with pid 32465 either refused to load frida-agent, or terminated during injection [2025-08-23 23:04:10][356722912907606][4981 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 23:04:10][356722912907606][5121 ms][DEBUG] SU: done in 141 ms; out [2025-08-23 23:04:10][356722912907606][5121 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 23:04:10][356722912907606][5121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:04:10][356722912907606][5246 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 23:04:10][356722912907606][5246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:04:10][356722912907606][5404 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 23:04:12][356722912907606][7417 ms][DEBUG] START check_boot_completed [2025-08-23 23:04:12][356722912907606][7417 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:04:12][356722912907606][7464 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:04:12][356722912907606][7465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:04:12][356722912907606][7511 ms][DEBUG] SU: done in 46 ms; out [2025-08-23 23:04:12][356722912907606][7511 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 23:04:15][356722912907606][10526 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 23:04:15][356722912907606][10526 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722912907606\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6897\"}'\'' -e'"" [2025-08-23 23:04:20][356722912907606][15525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e69f9932-9653-4026-a240-173cfa39e8db","id":"QR_e69f9932-9653-4026-a240-173cfa39e8db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:04:20][356722912907606][15681 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-08-23 23:04:20][356722912907606][15681 ms][DEBUG] END runCmdUntilRes#2 in 5155 ms [2025-08-23 23:04:20][356722912907606][15681 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:05:04][351460451124730][0 ms][INFO] === Request start === [2025-08-23 23:05:04][351460451124730][1 ms][DEBUG] START check_scloud [2025-08-23 23:05:04][351460451124730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:05:04][351460451124730][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3404 5012 23638932 126824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:05:04][351460451124730][304 ms][DEBUG] targetPkg: running [2025-08-23 23:05:04][351460451124730][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-23 23:05:04][351460451124730][304 ms][DEBUG] START check_boot_completed [2025-08-23 23:05:04][351460451124730][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:05:04][351460451124730][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 23:05:04][351460451124730][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:05:05][351460451124730][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:05:05][351460451124730][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 23:05:05][351460451124730][413 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:05:05][351460451124730][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460451124730\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1848\"}'\'' -e'"" [2025-08-23 23:05:05][351460451124730][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:05:05][351460451124730][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460451124730\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1848\"}'\'' -e'"" [2025-08-23 23:05:11][351460451124730][6724 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46ef6e18-7291-4f13-9066-0e6aed45403d","id":"QR_46ef6e18-7291-4f13-9066-0e6aed45403d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:05:11][351460451124730][6880 ms][DEBUG] proc_open done in 6467 ms; code=255; res.len=3343 [2025-08-23 23:05:11][351460451124730][6880 ms][DEBUG] END runCmdUntilRes#1 in 6467 ms [2025-08-23 23:05:11][351460451124730][6880 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:07:04][352686593090905][1 ms][INFO] === Request start === [2025-08-23 23:07:04][352686593090905][1 ms][DEBUG] START check_scloud [2025-08-23 23:07:04][352686593090905][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:07:05][352686593090905][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 3404 5012 23750720 137408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:07:05][352686593090905][308 ms][DEBUG] targetPkg: running [2025-08-23 23:07:05][352686593090905][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-23 23:07:05][352686593090905][309 ms][DEBUG] START check_boot_completed [2025-08-23 23:07:05][352686593090905][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:07:05][352686593090905][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:07:05][352686593090905][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:07:05][352686593090905][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:07:05][352686593090905][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:07:05][352686593090905][387 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:07:05][352686593090905][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686593090905\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6846\"}'\'' -e'"" [2025-08-23 23:07:05][352686593090905][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:07:05][352686593090905][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686593090905\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6846\"}'\'' -e'"" [2025-08-23 23:07:10][352686593090905][5791 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f24a473-8b47-49b0-bd1c-dbf19851ed5b","id":"QR_8f24a473-8b47-49b0-bd1c-dbf19851ed5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:07:10][352686593090905][5948 ms][DEBUG] proc_open done in 5560 ms; code=255; res.len=3343 [2025-08-23 23:07:10][352686593090905][5948 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-08-23 23:07:10][352686593090905][5948 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:10:05][352271525876935][1 ms][INFO] === Request start === [2025-08-23 23:10:05][352271525876935][1 ms][DEBUG] START check_scloud [2025-08-23 23:10:05][352271525876935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:10:05][352271525876935][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 3404 5012 23856292 149580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:10:05][352271525876935][248 ms][DEBUG] targetPkg: running [2025-08-23 23:10:05][352271525876935][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-23 23:10:05][352271525876935][248 ms][DEBUG] START check_boot_completed [2025-08-23 23:10:05][352271525876935][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:10:05][352271525876935][278 ms][DEBUG] ADB: done in 30 ms; out [2025-08-23 23:10:05][352271525876935][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:10:05][352271525876935][325 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:10:05][352271525876935][325 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-23 23:10:05][352271525876935][325 ms][DEBUG] START check_internet [2025-08-23 23:10:05][352271525876935][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.166/203.166/203.166/0.000 ms\n [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] check_internet: online [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] END check_internet in 485 ms [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:10:06][352271525876935][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271525876935\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4702\"}'\'' -e'"" [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:10:06][352271525876935][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271525876935\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4702\"}'\'' -e'"" [2025-08-23 23:10:11][352271525876935][6277 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fff6cf5a-cbf4-4c20-b647-3f5fa842288e","id":"QR_fff6cf5a-cbf4-4c20-b647-3f5fa842288e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:10:11][352271525876935][6433 ms][DEBUG] proc_open done in 5622 ms; code=255; res.len=3343 [2025-08-23 23:10:11][352271525876935][6433 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-23 23:10:11][352271525876935][6433 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:13:05][351364396219771][1 ms][INFO] === Request start === [2025-08-23 23:13:05][351364396219771][1 ms][DEBUG] START check_scloud [2025-08-23 23:13:05][351364396219771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:13:05][351364396219771][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 3404 5012 23988360 160564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:13:05][351364396219771][316 ms][DEBUG] targetPkg: running [2025-08-23 23:13:05][351364396219771][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-23 23:13:05][351364396219771][316 ms][DEBUG] START check_boot_completed [2025-08-23 23:13:05][351364396219771][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:13:05][351364396219771][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:13:05][351364396219771][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:13:05][351364396219771][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:13:05][351364396219771][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:13:05][351364396219771][394 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:13:05][351364396219771][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364396219771\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4655\"}'\'' -e'"" [2025-08-23 23:13:05][351364396219771][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:13:05][351364396219771][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364396219771\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4655\"}'\'' -e'"" [2025-08-23 23:13:11][351364396219771][6111 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_552a4361-6e32-41bf-b104-9230d0067602","id":"QR_552a4361-6e32-41bf-b104-9230d0067602","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:13:11][351364396219771][6268 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-08-23 23:13:11][351364396219771][6268 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-08-23 23:13:11][351364396219771][6268 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:22:04][356637713188380][1 ms][INFO] === Request start === [2025-08-23 23:22:04][356637713188380][1 ms][DEBUG] START check_scloud [2025-08-23 23:22:04][356637713188380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:22:04][356637713188380][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 3404 5012 24131744 171880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:22:04][356637713188380][313 ms][DEBUG] targetPkg: running [2025-08-23 23:22:04][356637713188380][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-23 23:22:04][356637713188380][313 ms][DEBUG] START check_boot_completed [2025-08-23 23:22:04][356637713188380][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:22:05][356637713188380][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:22:05][356637713188380][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:22:05][356637713188380][440 ms][DEBUG] SU: done in 80 ms; out [2025-08-23 23:22:05][356637713188380][440 ms][DEBUG] END check_boot_completed in 127 ms [2025-08-23 23:22:05][356637713188380][440 ms][DEBUG] START check_internet [2025-08-23 23:22:05][356637713188380][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] SU: done in 466 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.916/200.916/200.916/0.000 ms\n [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] check_internet: online [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] END check_internet in 467 ms [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:22:05][356637713188380][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356637713188380\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7797\"}'\'' -e'"" [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:22:05][356637713188380][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356637713188380\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7797\"}'\'' -e'"" [2025-08-23 23:22:13][356637713188380][8514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72785f27-4d60-4fbe-81c4-47b845efea75","id":"QR_72785f27-4d60-4fbe-81c4-47b845efea75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:22:13][356637713188380][8670 ms][DEBUG] proc_open done in 7763 ms; code=255; res.len=3343 [2025-08-23 23:22:13][356637713188380][8670 ms][DEBUG] END runCmdUntilRes#1 in 7763 ms [2025-08-23 23:22:13][356637713188380][8670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:35:04][350551932658550][1 ms][INFO] === Request start === [2025-08-23 23:35:04][350551932658550][1 ms][DEBUG] START check_scloud [2025-08-23 23:35:04][350551932658550][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:35:04][350551932658550][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 3404 5012 24237380 183344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:35:04][350551932658550][257 ms][DEBUG] targetPkg: running [2025-08-23 23:35:04][350551932658550][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-23 23:35:04][350551932658550][257 ms][DEBUG] START check_boot_completed [2025-08-23 23:35:04][350551932658550][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:35:05][350551932658550][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:35:05][350551932658550][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:35:05][350551932658550][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:35:05][350551932658550][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:35:05][350551932658550][335 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:35:05][350551932658550][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551932658550\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1954\"}'\'' -e'"" [2025-08-23 23:35:05][350551932658550][335 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:35:05][350551932658550][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551932658550\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1954\"}'\'' -e'"" [2025-08-23 23:35:10][350551932658550][5693 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e78047e7-5bca-46af-a782-98cd7c06b46f","id":"QR_e78047e7-5bca-46af-a782-98cd7c06b46f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:35:10][350551932658550][5849 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-23 23:35:10][350551932658550][5849 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-23 23:35:10][350551932658550][5849 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:40:04][355178450127514][1 ms][INFO] === Request start === [2025-08-23 23:40:04][355178450127514][1 ms][DEBUG] START check_scloud [2025-08-23 23:40:04][355178450127514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:40:05][355178450127514][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 3404 5012 24417908 195072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:40:05][355178450127514][273 ms][DEBUG] targetPkg: running [2025-08-23 23:40:05][355178450127514][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-23 23:40:05][355178450127514][273 ms][DEBUG] START check_boot_completed [2025-08-23 23:40:05][355178450127514][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:40:05][355178450127514][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:40:05][355178450127514][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:40:05][355178450127514][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:40:05][355178450127514][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:40:05][355178450127514][351 ms][DEBUG] START check_internet [2025-08-23 23:40:05][355178450127514][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:40:05][355178450127514][804 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.257/201.257/201.257/0.000 ms\n [2025-08-23 23:40:05][355178450127514][804 ms][DEBUG] check_internet: online [2025-08-23 23:40:05][355178450127514][804 ms][DEBUG] END check_internet in 453 ms [2025-08-23 23:40:05][355178450127514][804 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:40:05][355178450127514][804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355178450127514\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4533\"}'\'' -e'"" [2025-08-23 23:40:05][355178450127514][804 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:40:05][355178450127514][805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355178450127514\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4533\"}'\'' -e'"" [2025-08-23 23:40:12][355178450127514][7693 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bbacc6b-1b34-4f8d-8055-3f0fe1bf51a7","id":"QR_1bbacc6b-1b34-4f8d-8055-3f0fe1bf51a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:40:12][355178450127514][7849 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3343 [2025-08-23 23:40:12][355178450127514][7849 ms][DEBUG] END runCmdUntilRes#1 in 7044 ms [2025-08-23 23:40:12][355178450127514][7849 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:44:03][350389912234112][1 ms][INFO] === Request start === [2025-08-23 23:44:03][350389912234112][1 ms][DEBUG] START check_scloud [2025-08-23 23:44:03][350389912234112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:44:04][350389912234112][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 3404 5012 24531800 205636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:44:04][350389912234112][298 ms][DEBUG] targetPkg: running [2025-08-23 23:44:04][350389912234112][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-23 23:44:04][350389912234112][298 ms][DEBUG] START check_boot_completed [2025-08-23 23:44:04][350389912234112][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:44:04][350389912234112][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:44:04][350389912234112][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:44:04][350389912234112][439 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 23:44:04][350389912234112][439 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 23:44:04][350389912234112][439 ms][DEBUG] START check_internet [2025-08-23 23:44:04][350389912234112][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:44:04][350389912234112][907 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.028/201.028/201.028/0.000 ms\n [2025-08-23 23:44:04][350389912234112][907 ms][DEBUG] check_internet: online [2025-08-23 23:44:04][350389912234112][908 ms][DEBUG] END check_internet in 469 ms [2025-08-23 23:44:04][350389912234112][908 ms][DEBUG] rawBody.length=1148 [2025-08-23 23:44:04][350389912234112][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389912234112\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-08-23 23:44:04][350389912234112][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:44:04][350389912234112][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389912234112\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-08-23 23:44:09][350389912234112][5156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c48e26af-04b0-4933-bd76-0b27b43639f9","id":"QR_c48e26af-04b0-4933-bd76-0b27b43639f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:44:09][350389912234112][5312 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-23 23:44:09][350389912234112][5312 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-23 23:44:09][350389912234112][5312 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:46:30][353494116456276][1 ms][INFO] === Request start === [2025-08-23 23:46:30][353494116456276][1 ms][DEBUG] START check_scloud [2025-08-23 23:46:30][353494116456276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:46:31][353494116456276][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3404 5012 24674236 217124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:46:31][353494116456276][304 ms][DEBUG] targetPkg: running [2025-08-23 23:46:31][353494116456276][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-23 23:46:31][353494116456276][304 ms][DEBUG] START check_boot_completed [2025-08-23 23:46:31][353494116456276][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:46:31][353494116456276][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-23 23:46:31][353494116456276][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:46:31][353494116456276][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:46:31][353494116456276][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-23 23:46:31][353494116456276][382 ms][DEBUG] START check_internet [2025-08-23 23:46:31][353494116456276][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] SU: done in 299 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.537/203.537/203.537/0.000 ms\n [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] check_internet: online [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] END check_internet in 299 ms [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:46:31][353494116456276][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494116456276\",\"model\":\"SM-T307U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1618\"}'\'' -e'"" [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:46:31][353494116456276][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494116456276\",\"model\":\"SM-T307U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1618\"}'\'' -e'"" [2025-08-23 23:46:36][353494116456276][5834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c5df735-1bae-4fed-b5f6-c0ac4e4e4c49","id":"QR_3c5df735-1bae-4fed-b5f6-c0ac4e4e4c49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:46:36][353494116456276][5990 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-08-23 23:46:36][353494116456276][5990 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-08-23 23:46:36][353494116456276][5990 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:51:04][352967354993846][1 ms][INFO] === Request start === [2025-08-23 23:51:04][352967354993846][1 ms][DEBUG] START check_scloud [2025-08-23 23:51:04][352967354993846][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:51:05][352967354993846][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 3404 5012 24837152 228264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:51:05][352967354993846][263 ms][DEBUG] targetPkg: running [2025-08-23 23:51:05][352967354993846][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-23 23:51:05][352967354993846][263 ms][DEBUG] START check_boot_completed [2025-08-23 23:51:05][352967354993846][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:51:05][352967354993846][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 23:51:05][352967354993846][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:51:05][352967354993846][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:51:05][352967354993846][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 23:51:05][352967354993846][373 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:51:05][352967354993846][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354993846\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1133\"}'\'' -e'"" [2025-08-23 23:51:05][352967354993846][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:51:05][352967354993846][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354993846\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1133\"}'\'' -e'"" [2025-08-23 23:51:10][352967354993846][5387 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cea457d-7fc0-40f5-8ba0-cacc0897ea5d","id":"QR_8cea457d-7fc0-40f5-8ba0-cacc0897ea5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:51:10][352967354993846][5543 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-23 23:51:10][352967354993846][5543 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-23 23:51:10][352967354993846][5543 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:53:03][356360393031826][0 ms][INFO] === Request start === [2025-08-23 23:53:03][356360393031826][1 ms][DEBUG] START check_scloud [2025-08-23 23:53:03][356360393031826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:53:03][356360393031826][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 3404 5012 24960776 240216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:53:03][356360393031826][311 ms][DEBUG] targetPkg: running [2025-08-23 23:53:03][356360393031826][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-23 23:53:03][356360393031826][312 ms][DEBUG] START check_boot_completed [2025-08-23 23:53:03][356360393031826][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:53:03][356360393031826][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:53:03][356360393031826][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:53:03][356360393031826][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:53:03][356360393031826][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 23:53:03][356360393031826][421 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:53:03][356360393031826][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8495\"}'\'' -e'"" [2025-08-23 23:53:03][356360393031826][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:53:03][356360393031826][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8495\"}'\'' -e'"" [2025-08-23 23:53:11][356360393031826][8434 ms][DEBUG] proc_open done in 8014 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-23 23:53:11][356360393031826][8434 ms][DEBUG] END runCmdUntilRes#1 in 8014 ms [2025-08-23 23:53:11][356360393031826][8434 ms][WARN] Detected error: Process with pid 3404 either refused to load frida-agent, or terminated during injection [2025-08-23 23:53:11][356360393031826][8434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-23 23:53:12][356360393031826][8591 ms][DEBUG] SU: done in 156 ms; out [2025-08-23 23:53:12][356360393031826][8591 ms][WARN] targetPkg: not running, restarting 2 [2025-08-23 23:53:12][356360393031826][8591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:53:12][356360393031826][8809 ms][DEBUG] SU: done in 219 ms; out [2025-08-23 23:53:12][356360393031826][8809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:53:12][356360393031826][9059 ms][DEBUG] SU: done in 250 ms; out [2025-08-23 23:53:14][356360393031826][11074 ms][DEBUG] START check_boot_completed [2025-08-23 23:53:14][356360393031826][11074 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:53:14][356360393031826][11121 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:53:14][356360393031826][11121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:53:14][356360393031826][11184 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:53:14][356360393031826][11184 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-23 23:53:17][356360393031826][14198 ms][DEBUG] START runCmdUntilRes#2 [2025-08-23 23:53:17][356360393031826][14199 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8495\"}'\'' -e'"" [2025-08-23 23:53:19][356360393031826][15698 ms][DEBUG] proc_open done in 1500 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-23 23:53:19][356360393031826][15699 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-08-23 23:53:19][356360393031826][15699 ms][WARN] Detected error 2; Reboot the device [2025-08-23 23:53:19][356360393031826][15699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-23 23:53:19][356360393031826][16307 ms][DEBUG] SU: done in 609 ms; out [2025-08-23 23:53:34][356816561901181][1 ms][INFO] === Request start === [2025-08-23 23:53:34][356816561901181][1 ms][DEBUG] START check_scloud [2025-08-23 23:53:34][356816561901181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:53:34][356816561901181][31 ms][DEBUG] SU: done in 30 ms; out [2025-08-23 23:53:34][356816561901181][31 ms][WARN] targetPkg: not running, restarting [2025-08-23 23:53:34][356816561901181][31 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:53:34][356816561901181][62 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:53:34][356816561901181][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:53:34][356816561901181][94 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:53:36][356816561901181][2109 ms][DEBUG] END check_scloud in 2108 ms [2025-08-23 23:53:36][356816561901181][2109 ms][DEBUG] START check_boot_completed [2025-08-23 23:53:36][356816561901181][2109 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:54:04][356360393031826][1 ms][INFO] === Request start === [2025-08-23 23:54:04][356360393031826][1 ms][DEBUG] START check_scloud [2025-08-23 23:54:04][356360393031826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:54:04][356360393031826][30 ms][DEBUG] SU: done in 28 ms; out [2025-08-23 23:54:04][356360393031826][30 ms][WARN] targetPkg: not running, restarting [2025-08-23 23:54:04][356360393031826][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:54:04][356360393031826][61 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:54:04][356360393031826][61 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:54:04][356360393031826][92 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:54:06][356360393031826][2107 ms][DEBUG] END check_scloud in 2106 ms [2025-08-23 23:54:06][356360393031826][2107 ms][DEBUG] START check_boot_completed [2025-08-23 23:54:06][356360393031826][2107 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:54:26][356360393031826][22456 ms][DEBUG] ADB: done in 20349 ms; out [2025-08-23 23:54:26][356360393031826][22456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:54:26][356360393031826][22566 ms][DEBUG] SU: done in 109 ms; out [2025-08-23 23:54:26][356360393031826][22566 ms][DEBUG] END check_boot_completed in 20459 ms [2025-08-23 23:54:26][356360393031826][22566 ms][DEBUG] START check_internet [2025-08-23 23:54:26][356360393031826][22566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:54:26][356360393031826][22769 ms][DEBUG] SU: done in 203 ms; out [2025-08-23 23:54:26][356360393031826][22769 ms][WARN] check_internet: offline [2025-08-23 23:54:26][356360393031826][22769 ms][DEBUG] END check_internet in 203 ms [2025-08-23 23:54:31][356816561901181][0 ms][INFO] === Request start === [2025-08-23 23:54:31][356816561901181][1 ms][DEBUG] START check_scloud [2025-08-23 23:54:31][356816561901181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:54:31][356816561901181][165 ms][DEBUG] SU: done in 165 ms; out [2025-08-23 23:54:31][356816561901181][165 ms][WARN] targetPkg: not running, restarting [2025-08-23 23:54:31][356816561901181][165 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:54:31][356816561901181][197 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:54:31][356816561901181][197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:54:32][356816561901181][228 ms][DEBUG] SU: done in 31 ms; out [2025-08-23 23:54:34][356816561901181][2234 ms][DEBUG] END check_scloud in 2234 ms [2025-08-23 23:54:34][356816561901181][2235 ms][DEBUG] START check_boot_completed [2025-08-23 23:54:34][356816561901181][2235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:54:34][356816561901181][2281 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:54:34][356816561901181][2282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:54:34][356816561901181][2344 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:54:34][356816561901181][2344 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 23:54:34][356816561901181][2344 ms][DEBUG] START check_internet [2025-08-23 23:54:34][356816561901181][2344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:54:34][356816561901181][2484 ms][DEBUG] SU: done in 140 ms; out [2025-08-23 23:54:34][356816561901181][2484 ms][WARN] check_internet: offline [2025-08-23 23:54:34][356816561901181][2484 ms][DEBUG] END check_internet in 140 ms [2025-08-23 23:55:03][356360393031826][0 ms][INFO] === Request start === [2025-08-23 23:55:03][356360393031826][1 ms][DEBUG] START check_scloud [2025-08-23 23:55:03][356360393031826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:55:04][356360393031826][382 ms][DEBUG] SU: done in 382 ms; out [2025-08-23 23:55:04][356360393031826][383 ms][WARN] targetPkg: not running, restarting [2025-08-23 23:55:04][356360393031826][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:55:04][356360393031826][538 ms][DEBUG] SU: done in 155 ms; out [2025-08-23 23:55:04][356360393031826][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:55:04][356360393031826][928 ms][DEBUG] SU: done in 391 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 23:55:06][356360393031826][2943 ms][DEBUG] END check_scloud in 2942 ms [2025-08-23 23:55:06][356360393031826][2943 ms][DEBUG] START check_boot_completed [2025-08-23 23:55:06][356360393031826][2943 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:55:06][356360393031826][2990 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:55:06][356360393031826][2990 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:55:06][356360393031826][3053 ms][DEBUG] SU: done in 62 ms; out [2025-08-23 23:55:06][356360393031826][3053 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-23 23:55:06][356360393031826][3053 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:55:06][356360393031826][3053 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7248\"}'\'' -e'"" [2025-08-23 23:55:06][356360393031826][3053 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:55:06][356360393031826][3053 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356360393031826\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7248\"}'\'' -e'"" [2025-08-23 23:55:15][356360393031826][11129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6ee1b62-49fa-421e-973d-3de9df4c90f6","id":"QR_e6ee1b62-49fa-421e-973d-3de9df4c90f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:55:15][356360393031826][11285 ms][DEBUG] proc_open done in 8232 ms; code=255; res.len=3343 [2025-08-23 23:55:15][356360393031826][11285 ms][DEBUG] END runCmdUntilRes#1 in 8232 ms [2025-08-23 23:55:15][356360393031826][11285 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:55:21][356816561901181][0 ms][INFO] === Request start === [2025-08-23 23:55:21][356816561901181][1 ms][DEBUG] START check_scloud [2025-08-23 23:55:21][356816561901181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:55:21][356816561901181][406 ms][DEBUG] SU: done in 405 ms; outu0_a118 11000 5019 23663448 91624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:55:21][356816561901181][406 ms][DEBUG] targetPkg: running [2025-08-23 23:55:21][356816561901181][406 ms][DEBUG] END check_scloud in 405 ms [2025-08-23 23:55:21][356816561901181][406 ms][DEBUG] START check_boot_completed [2025-08-23 23:55:21][356816561901181][406 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:55:21][356816561901181][453 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:55:21][356816561901181][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:55:21][356816561901181][546 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 23:55:21][356816561901181][546 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-23 23:55:21][356816561901181][546 ms][DEBUG] rawBody.length=1148 [2025-08-23 23:55:21][356816561901181][546 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561901181\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-08-23 23:55:21][356816561901181][547 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:55:21][356816561901181][547 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561901181\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-08-23 23:55:27][356816561901181][6232 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 23:55:27][356816561901181][6388 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=107 [2025-08-23 23:55:27][356816561901181][6388 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-23 23:55:27][356816561901181][6388 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 23:55:27][][0 ms][INFO] === Request start === [2025-08-23 23:55:27][][1 ms][DEBUG] START check_scloud [2025-08-23 23:55:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:55:28][][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11000 5019 23813228 93420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:55:28][][320 ms][DEBUG] targetPkg: running [2025-08-23 23:55:28][][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-23 23:55:28][][320 ms][DEBUG] START check_boot_completed [2025-08-23 23:55:28][][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:55:28][][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 23:55:28][][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:55:28][][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:55:28][][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-23 23:55:28][][414 ms][DEBUG] rawBody.length=1129 [2025-08-23 23:55:28][][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW72HGGRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3576\"}'\'' -e'"" [2025-08-23 23:55:28][][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:55:28][][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW72HGGRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3576\"}'\'' -e'"" [2025-08-23 23:55:31][][3866 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-23 23:55:31][][4022 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-23 23:55:31][][4022 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-08-23 23:55:31][][4022 ms][INFO] SUCCESS response from frida (len=107) [2025-08-23 23:55:34][356816561901181][0 ms][INFO] === Request start === [2025-08-23 23:55:34][356816561901181][1 ms][DEBUG] START check_scloud [2025-08-23 23:55:34][356816561901181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:55:34][356816561901181][345 ms][DEBUG] SU: done in 344 ms; outu0_a118 11000 5019 23916624 105196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-23 23:55:34][356816561901181][345 ms][DEBUG] targetPkg: running [2025-08-23 23:55:34][356816561901181][345 ms][DEBUG] END check_scloud in 345 ms [2025-08-23 23:55:34][356816561901181][345 ms][DEBUG] START check_boot_completed [2025-08-23 23:55:34][356816561901181][345 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:55:34][356816561901181][392 ms][DEBUG] ADB: done in 46 ms; out [2025-08-23 23:55:34][356816561901181][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:55:34][356816561901181][485 ms][DEBUG] SU: done in 94 ms; out [2025-08-23 23:55:34][356816561901181][485 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-23 23:55:34][356816561901181][486 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:55:34][356816561901181][486 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561901181\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6304\"}'\'' -e'"" [2025-08-23 23:55:34][356816561901181][486 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:55:34][356816561901181][486 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561901181\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6304\"}'\'' -e'"" [2025-08-23 23:55:39][356816561901181][5594 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42e10b66-d4d5-4940-b932-ffc861d54d9d","id":"QR_42e10b66-d4d5-4940-b932-ffc861d54d9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:55:39][356816561901181][5750 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-23 23:55:39][356816561901181][5750 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-23 23:55:39][356816561901181][5750 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-23 23:58:04][350940411019857][1 ms][INFO] === Request start === [2025-08-23 23:58:04][350940411019857][1 ms][DEBUG] START check_scloud [2025-08-23 23:58:04][350940411019857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-23 23:58:04][350940411019857][390 ms][DEBUG] SU: done in 389 ms; out [2025-08-23 23:58:04][350940411019857][390 ms][WARN] targetPkg: not running, restarting [2025-08-23 23:58:04][350940411019857][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-23 23:58:04][350940411019857][515 ms][DEBUG] SU: done in 125 ms; out [2025-08-23 23:58:04][350940411019857][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-23 23:58:04][350940411019857][718 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-23 23:58:06][350940411019857][2733 ms][DEBUG] END check_scloud in 2732 ms [2025-08-23 23:58:06][350940411019857][2733 ms][DEBUG] START check_boot_completed [2025-08-23 23:58:06][350940411019857][2733 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-23 23:58:06][350940411019857][2780 ms][DEBUG] ADB: done in 47 ms; out [2025-08-23 23:58:06][350940411019857][2780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-23 23:58:07][350940411019857][2827 ms][DEBUG] SU: done in 47 ms; out [2025-08-23 23:58:07][350940411019857][2827 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-23 23:58:07][350940411019857][2827 ms][DEBUG] START check_internet [2025-08-23 23:58:07][350940411019857][2827 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.172/257.172/257.172/0.000 ms\n [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] check_internet: online [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] END check_internet in 547 ms [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] rawBody.length=1149 [2025-08-23 23:58:07][350940411019857][3374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411019857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9793\"}'\'' -e'"" [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-23 23:58:07][350940411019857][3374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411019857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9793\"}'\'' -e'"" [2025-08-23 23:58:13][350940411019857][9138 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2a23858-10c4-48f8-bd9e-3c7aee0e3454","id":"QR_a2a23858-10c4-48f8-bd9e-3c7aee0e3454","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-23 23:58:13][350940411019857][9294 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-08-23 23:58:13][350940411019857][9295 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-23 23:58:13][350940411019857][9295 ms][INFO] SUCCESS response from frida (len=3343)